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1 . INTRODUCTION 

1.1.  Current  Approaches  to  Fault  Tolerant  Digital  Systems 

In  recent  years  due  to  the  prevalent  use  of  integrated  circuits  the 
complexity  and  size  of  digital  systems  has  increased  dramatically.  As  a 
result  system  reliability  has  become  a topic  of  major  concern.  And, 
although  integrated  circuit  manufacturers  make  efforts  to  ensure  the 
reliability  of  their  products,  the  size  of  digital  systems  today  makes  the 
probability  of  a circuit  fault  somewhere  in  a complex  digital  system  at  any 
given  time  a factor  which  must  be  considered.  Considerable  research  has, 
therefore,  been  conducted  in  order  to  find  techniques  for  detecting  system 
faults.  One  method  for  doing  this  in  programmable  digital  systems  is 
periodic  software  checking. 

Periodic  software  checking  essentially  involves  the  utilization  of 
diagnostic  programs  at  periodic  intervals  as  a means  to  test  a programmable 
digital  system  for  correct  operation.  If  a system  fault  is  detected  during 
this  testing  period  then  necessary  repair  or  replacement  is  made.  Obviously, 
such  a method  can  be  used  only  where  human  intervention  is  possible.  There, 
however,  are  several  drawbacks  associated  with  periodic  software  checking. 
First,  the  diagnostic  programs  written  for  complex  digital  systems  seldom 
fully  check  the  system  for  correct  operation.  This  is  particularly  true 
if  the  system  is  already  built.  If  the  diagnostic  routines  are  developed 
concurrently  with  the  system  design,  then  a more  diagnosable  and  main- 
tainable system  generally  results,  and  initial  system  checkout  time  is 
usually  reduced.  But  still,  the  system  is  seldom  fully  checked.  Second, 
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during  the  testing  or  checking  period  when  the  diagnostic  routines  are 
running,  valuable  system  time  is  lost.  This  lost  time  can  be  very  signi- 
ficant for  more  complex  digital  systems.  Third,  since  accurate  results  are 
not  assured  until  the  testing  period  following  the  computation,  such  a 
digital  system  cannot  be  used  in  a critical  application  where  accuracy  of 
system  output  must  be  guaranteed.  Also,  even  if  testing  reveals  no  faults, 
the  correctness  of  prior  system  output  cannot  be  fully  assured  since 
transient  faults  occurring  outside  of  the  testing  period  can  cause  erroneous 
results  which  will  not  be  detected.  Fourth,  if  a fault  is  detected  during 
the  testing  period,  then  all  system  output  obtained  since  the  last  testing 
period  must  be  suspect.  Thus,  when  a checkout  fails,  computation  must  be 
rolled  back  ;o  the  previous  testing  period.  The  effect  is  lost  time  and 
money . 

A second  approach  to  fault  tolerant  digital  systems  is  the  fault 
masking  redundancy  approach.  With  this  approach,  a digital  system  is 
designed  to  operate  with  high  reliability  for  a period  of  time  and  is  then 
expected  to  fail,  the  failure  occurring  when  enough  faults  accumulate  to 
exceed  the  protection  designed  into  the  system  through  redundancy.  Such  a 
system  is  suitable  for  applications  on  space  missions  where  reliable  operation 
is  required  only  for  the  mission  duration.  Application  of  the  approach  to 
maintained  digital  systems  is  not  too  suitable  as  the  fault  masking  redundancy 
built  into  the  system  also  makes  the  system  difficult  to  test.  Triple 
Modular  Redundancy  (TMR)  [11,16]  and  Quadded  Logic  [11,16]  are  probably  the 
most  common  fault  masking  redundancy  techniques  used. 


A third  approach  to  the  design  of  fault  tolerant  digital  systems, 
self -checking  design,  overcomes  some  of  the  disadvantages  of  periodic 
software  checking  and  fault  masking  redundancy  techniques.  The  main  advantage 
of  the  design  scheme  is  the  immediate  detection  of  faults  which  affect  system 
operation.  The  appearance  of  these  faults  is  indicated  using  hardware 
monitors  which  continuously  check  for  improperly  encoded  system  information. 
One  area  of  application  for  such  self-checking  digital  systems  has  been  in 
telephone  switching  computers,  e.g.  the  No.  1 ESS  [15]  and  the  No.  2 ESS  [6]. 
In  the  No.  1 ESS  information  was  encoded  in  a single  error  correcting,  double 
error  detecting  Hamming  code.  The  No.  2 ESS  used  a simple  parity  code  for 
information  encoding.  In  these  computers  any  improperly  encoded  information 
produced  by  a module  was  detected  by  the  hardware  monitors , and  a duplicate 
of  the  fs  _ed  module  was  switched  in  automatically,  thus  allowing  repair  of 
the  faulty  module  off-line  with  uninterrupted  computer  operation.  Another 
self-checking  computer,  the  Self-Testing  and  Repairing  (STAR)  computer  [3] 
was  developed  and  tested  at  the  Jet  Propulsion  Laboratory.  The  STAR  computer 
utilized  self-checking  circuits  in  a triple  modular  system  containing  spares. 
Defective  module  operation  detected  by  the  Test  and  Repair  Processor  (TARP) 
of  the  computer  initiated  the  replacement  of  the  faulty  module  by  one  of  the 
standby  spares.  The  TARP  itself  was  triplicated  and  was  considered  the 
hardcore  of  the  system. 

Another  type  of  self-checking  digital  system,  the  totally  self- 
checking  digital  system  was  introduced  by  Carter  and  Schneider  [9].  Such 
digital  systems  employ  on-line  fault  detection  and  guarantee  that  no 
erroneous  data  are  passed  to  the  user  without  an  error  indication  for  all 
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faults  from  a prescribed  set.  The  design  procedures  detailed  in  this  thesis 
produce  totally  self-checking  digital  systems.  A literature  survey  on 
previous  work  in  totally  self-checking  digital  systems  is  presented  in  the 
following  section. 


’ . Literature  Survey  on  Totally  Self-Checking  Digital  Systems 

Totally  self-checking  (TSC)  digital  system  design  has  been 
studied  in  some  detail  since  the  design  problem  was  formalized  in  Carter 
and  Schneider's  [9]  introductory  paper.  The  approach  has  been  to  consider 
a digital  system  as  composed  of  interconnections  of  functional  modules, 
Anderson  [1],  each  of  which  is  monitored  by  a hardware  checker.  Inputs  and 
outputs  each  functional  unit  are  encoded,  and  faulty  functional  module 
operation  is  indicated  by  the  production  of  an  improperly  encoded  module 
output.  This  improper  output  is  detected  by  a TSC  checker,  and  the 
erroneous  output  is  indicated  on  the  checker  output.  Design  of  the  TSC 
checker,  however,  has  presented  some  problems. 

Carter  and  Schneider  first  addressed  the  problem  of  TSC  checker 
design.  Included  in  their  introductory  paper  [9]  were  network  diagrams  for 
3 TSC  checkers;  a parity  code  checker,  a 2-out-of-5  code  checker,  and  a 
two-rail  code  checker.  The  checkers  were,  however,  assumed  to  be  self- 
checking only  for  faults  on  gate  outputs,  not  on  both  checker  gate  outputs 
and  inputs.  Anderson  [1]  modeled  faults  on  both  gate  outputs  and  Inputs  and 
presented  several  totally  self-checking  two-rail  checker  designs  as  well  as 
parity  checker  designs.  Anderson  and  Metze  [2]  also  investigated  m-out-of-n 
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checkers  in  general  and  formulated  a checker  design  for  the  k-out-of-2k 
codes.  Reddy  [28]  extended  Anderson  and  Metze' s work  on  the  k-out-of-2k 
checker  by  incorporating  an  easily  testable  cellular  array  [30]  in  the  design. 
The  result  was  a k-out-of-2k  checker  with  a smaller  test  set  than  that  of 
Anderson  and  Metze.  Design  rules  for  the  general  m-out-of-n  checker  were 
formulated  later  by  Smith  and  Metze  [33].  Further,  the  design  of  two  level 
m-out-of-n  checkers  was  shown  to  be  related  to  the  Ramsey  number  problem. 

Research  on  TSC  checkers  for  other  classes  of  codes  has  been 
minimal.  A TSC  checker  for  the  Berger  code  [5]  has  been  reported  by 
Ashjahee  and  Reddy  [29] . The  checker,  however,  utilizes  a code-disjoint 
translator  to  translate  the  Berger  code  into  a 1-out-of-n  code.  That  code 
is  then  fed  into  a 1-out-of-n  self-checking  checker. 

Design  of  the  self -checking  functional  unit  whose  operation  is 
monitored  by  the  TSC  checker  has  received  less  attention  than  the  TSC 
checker  design  itself.  A significant  amount  of  work,  however,  has  been  done 
on  synchronous  machine  design,  particularly  on  fail-safe  design.  Some  of 
the  machine  designs  resulting  from  this  work  have  properties  suitable  for 
application  in  TSC  designs.  Thoma  [34]  used  a symmetric  fault  model  and 
employed  on-set  and  off-set  form  equations  with  a k-out-of-n  code  for 
state  variable  encoding.  Thoma 's  method  was  later  modified  by  Diaz  [13]  so 
that  only  on-set  form  equations  were  used  in  the  design.  Formally  pointing 
out  the  relationships  between  some  fall-safe  designs  and  totally  self- 
checking designs,  Diaz  [14]  extended  TSC  design  concepts  to  Moore- 
synchronous  machines  using  a two-rail  code  for  the  input  and  output  variables 
and  a k-out-of-n  code  for  the  state  variables. 
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Recently,  Sawin  [31]  proposed  another  method  for  fall-safe 
synchronous  machine  design  using  the  on-set  realization  only.  Savin's 
approach  was  drastically  different  from  others  because  his  state  assignment 
was  tailored  specifically  for  the  given  flow  table.  A further  Improvement 
of  the  on-set  realization  method  was  presented  in  Wang's  [35]  paper. 

Wang's  approach  was  similar  to  that  of  Savin's  but  led  to  a generalization 
of  the  method. 

Much  less  work  has  been  done  on  TSC  asynchronous  sequential  machines 
Recent  work  by  Ozguner  [26],  however,  has  led  to  TSC  asynchronous  machine 
design  methods.  Other  authors  [23,27]  have  proposed  designs,  but  none  have 
been  totally  self-checking. 

All  the  methods  for  TSC  checker  and  functional  module  design 
discussed  .uus  far  have  one  property  in  common.  All  use  space  encodings  to 
achieve  the  required  measure  of  fault  detection  capability.  There  exists, 
however,  an  alternate  encoding  scheme,  time  encoding,  which  achieves  similar 
results.  A type  of  time  encoding,  the  two-rail  time  encoding,  is  the 
subject  of  this  thesis.  Systems  utilizing  this  type  of  time  encoding  are 
called  alternating  systems  or  alternating  logic  systems.  Such  systems  were 
first  proposed  by  Bark  and  Kinne  [4]  in  1953.  No  reference,  however,  was 
made  to  the  fault  detecting  capabilities  of  the  method  until  Yamamoto  [36] 
et  al.  published  an  introductory  paper  on  the  subject.  This  thesis 
utilizes  the  fault  detection  capabilities  of  alternating  logic  in  the  design 
of  totally  self-checking  alternating  logic  systems. 
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2.  SELF-CHECKING  COMBINATIONAL  ALTERNATING  LOGIC 

2.1.  Combinational  Alternating  Logic  Design 

Combinational  alternating  logic  design  is  a design  technique 
resulting  In  combinational  alternating  networks.  Any  input  to  an  alternating 
network  used  within  an  alternating  system  or  which  is  in  Itself  an  alter- 
nating system  must  be  an  alternating  binary  variable.  Alternating  binary 
variable,  alternating  network,  and  alternating  logic  design  are  thus  related 
terms.  Alternating  binary  sequence  is  first  defined. 

Definition  2.1:  An  alternating  binary  sequence  is  a sequence  of  symbols 

from  the  set  (0,1}  admitting  to  a sequential  parsing  into  2-tuples  of  the 
form  (d,d). 

l'or  example,  the  sequence  011001011001  is  an  alternating  binary  sequence  as 
the  parsing  01/10/01/01/10/01  can  be  made.  The  sequence  011101100110, 
however,  is  not. 

Definition  2.2:  An  alternating  binary  variable  is  a variable  which  assumes 

values  in  2-tuples  from  the  set  {oi,lo). 

As  a result,  any  sequence  produced  by  an  alternating  binary  variable  when 
viewed  as  a binary  sequence  is  an  alternating  binary  sequence. 

Now,  consider  a combinational  network.  Figure  2.1  a),  with  n 
inputs  xltx2,...,xn  and  one  output  y realizing  a function  f.  That  is, 

y - f(x1,x2,...,xn)  - f(X), 

where  X is  a binary  n-vector.  If  we  assume  that  x^,x2,...,xn  are  alternating 
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a)  Combinational  Network  Realizing  f 


b)  Alternating  Combinational  Network  Representing  f 

FP-  5045 

l 

| Figure  2.1.  Combinational  alternating  logic  network  model. 
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binary  variables  and  that  they  alternate  in  synchronism,  then  input  vectors, 
X,  are  applied  to  the  network  realizing  f in  complementary  pairs.  The 
network  input  can  therefore  be  represented  as  a vector  2-tuple,  (X,X)  where 

(X,X)  * (XiX^ . • XjXj ... x^) • 

The  output  produced  as  a result  of  this  input  must  also  be  a 2-tuple  although 
not  necessarily  complementary.  Since  the  network  realizes  f the  output 
2 -tuple  must  be 

( f (x j , X2 , . • * , xr ),  f (x^,X2» . . . , xn ) ) 

°r  (f(X),f(X)). 

Definition  2.3:  A network  realizing  the  function  f is  an  alternating  network 

iff  for  1 ery  (X,X)  an  output  (f(X),f(X))  is  produced  such  that  f(X)  ■ f(X). 

In  other  words,  the  network  realizing  f is  an  alternating  network  if  the 
output  variable  y alternates  when  synchronized  alternating  variables  are 
applied  a3  inputs.  Further,  since  y is  produced  as  a result  of  the  applica- 
tion of  (X ,X) , y alternates  in  synchronism  with  (X,X).  Definition  2.3  thus 
places  a significant  restriction  on  the  functions  realized  by  alternating 
networks.  This  class  of  functions  is  defined  in  the  following  theorem. 

Theorem  2.1:  A network  realizing  a function  f is  an  alternating  network  iff 

f is  a self-dual  function. 

Proof : If  f is  self-dual  then  f(X)  • f(X)  for  every  X and  any  network 

realizing  f must  therefore  be  an  alternating  network.  Conversely,  if  a 
network  is  an  alternating  network  then  f(X)  ■ ?(XJ  and  f-i-s  self-dual. 

Q . E . D . 
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Essentially,  Theorem  2.1  says  that  only  self-dual  functions  can  be  realized 
by  networks  that  are  alternating  networks.  However,  consider  a function  f 
that  is  not  self-dual  and  define  a function  f^  of  n+1  variables  $ ,xl,x2* * * * »xn 
as  follows.  Let 

A 

f*(0,x1,x2, . . . ,xn)  ■ f*(0,X)  ■ f(X) 
and  f*(l,x1,x2 xn)  - f*(l,X)  & f(X) 

for  every  X.  In  a sense  f* ($ ,x^,x2 , . . . ,xn)  represents  f (x^,x2 , . . . .x^)  since 

f*(0,Xl,x2 xn)  - f(x1,x2,...,xn).  Further,  f*  is  a self-dual  function 

as  shown  in  the  following  theorem. 

Theorem  2.2:  The  function  f*  of  n+1  variables  * .x^x^  . . . ,xq  defined  by 

f^ (0,x^ ,x2 , . . . ,x^)  ■ f (x^ »x2 , . • • »Xjj) 

f* (1  ,x^*x2  * ' * * ,3Cn^  m ^X1 ,X2 ’ * * * ,xn^ 
is  self-dual  for  arbitrary  f. 

Proof:  Using  Shannon's  expansion  theorem  f*($,X)  can  be  written  as 

f*($,X)  - «f*(l,X)  + if*(o,x) 

- *f(x)  + F(  :x). 

But  then  — — 

f*(t,X)  - T f (X)  +*f(X)-  (Ff(X))(*  f(X)) 

- (5 +f(X))(*+f(X)) 

- *T(X)  + f(X)¥  + f(X)f(X). 


Thus,  by  consensus 


i 

I 

I 


f*(i,x)  - «f(x)  + «f(X)  - f*(*,x), 
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and  f (4 ,x. ,x0 , . . . ,x  ) is  self-dual. 
x 1 z n 


Q.E.D. 


In  at'  alternating  system  it  is  the  function  f*  which  is  used  to  realize  a 
function  f whenever  f is  not  self-dual.  In  fact  f^  is  called  the  dualization 
of  f.  The  $ input  variable  of  f^  becomes  a clock  and  is  synchronized  to  the 
input  variables  (X,X).  That  is,  $“0  when  X is  applied  and  4«1  when  X is 
applied.  Thus,  when 


f * (Of^, Xj » ■ • • * f (x ^ » x2  * • • • » ) » 


and  when  $ ■ 1 


f^"  f^  (1  ,x^ ,X2 , . . . ,x^ ) m f^  (0,x^ ,X2  f • • • »x^)  " ^ (x^*x2  > 


With  the  (0,1)  clock  $ applied  as  input  the  self-dual  function  f^  thus 
produces  ^n  alternating  output  (f(X),f(X))  representing  f.  The  network  f^  is 
modeled  in  Figure  2.1  b).  Alternating  logic  design  can  now  be  defined. 


Definition  2.4:  Alternating  logic  design:  is  a design  technique  whereby 

combinational  networks  are  represented  utilizing  self-dual  functions  or 
compositions  of  self -dual  functions,  and  system  input  variables  are 
constrained  to  be  alternating  variables. 


Alternating  logic  design  is  therefore  implemented  by  first  formulating  a 
functional  description  of  the  required  function,  f.  If  f is  self-dual  any 
network  realizing  f is  an  alternating  network  and  alternating  input 

variables  (x^.x^) , (x2»x2> (xn*xn^  are  aPPl*«d  directly  to  that  network 

so  as  to  produce  (f(X),f(X)).  If  f is  not  self-dual,  a functional  description 
of  f.  is  generated,  and  f^  is  realized  in  a conventional  manner.  Then,  a 


H 
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(0,1)  clock  is  applied  to  the  $ input,  and  alternating  variables  (x^.x^), 

(x2 ,X2 ) ' ' ' ' » (xn>*n)  sync^ronized  to  t^ie  (0,1)  clock  are  applied  as  inputs 
resulting  in  an  alternating  output  (f(X),f(X))  from  the  network  realizing 
f*.  The  design  technique  is  illustrated  by  the  following  example. 

Example  2.1:  Consider  the  three  variable  functional  description  given  in 

Figure  2.2  a)  for  the  function  f.  The  problem  is  to  design  an  alternating 
network  which  represents  f.  Since  f(l,0,l)  J4  7(0, 1,0),  f is  not  self-dual. 
So,  any  network  realizing  f is  not  an  alternating  network.  However,  by 
adding  a fourth  variable,  $,  and  dualizing  f,  a functional  description  of  f*. 
Figure  2.2  b),  is  obtained.  From  Figure  2.2  b), 

fvt(§,x1,x2,x3)  - $ +$  XjX3  + x2x3  + xLx3 

->  f*  - (*  +x2)  + ($+xL+x3)  + (x2+x3)  + (Xj^+xp 

■>  f * “ ($  +x2)  ($  +Xj^  +x3)  (x2  +x3)  (x1  +x3). 

The  alternating  network  representing  f is  shown  in  Figure  2.2  c). 


2.2.  Single  Fault  Model 

A.11  digital  networks,  alternating  networks  included,  are  susceptible 
to  physical  failures  which  affect  network  operation  in  one  way  or  another. 
Several  models  to  represent  these  network  failures  have  been  used,  the  most 
popular  of  which  is  the  line  fault  model.  One  line  fault  model,  Carter  and 
Schneider  [9],  assumes  failures  can  be  represented  as  gate  output  lines 
stuck-at-l  (s-@-l)  or  stuck-at-0  (s-@-0).  Another  more  general  line  fault 
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model,  Anderson  and  Metze  [2] , assumes  all  failures  to  be  representable  by 
line  faults  on  all  gate  input  and  output  lines,  s-@-0  and  s-@-l.  The 
latter  representation  will  be  used  here.  Thus,  the  term  fault  will  refer 
to  a network  condition  in  which  one  or  more  gate  input  or  output  lines 
are  s-<a-0  or  s-(3-l.  The  term  single  fault  will  refer  to  a network  condition 
in  which  only  one  gate  input  or  one  gate  output  line  is  s-(a-0  or  s-@-l.  A 
tault  involving  several  lines  will  be  termed  a multiple  fault.  A 
unidirectional  fault  will  be  defined  as  a multiple  fault  in  which  the  faulty 
lines  are  all  stuck  at  the  same  logical  value,  either  all  s-(a-0  or  all 

S-@-l. 

Of  particular  interest  in  relation  to  alternating  networks  is  the 
s>*t  of  all  f-ngle  line  faults.  In  fact,  alternating  networks  will  be  shown 
to  be  ca”1  ole  of  detecting  all  single  faults  on  gate  input  and  output  lines, 
s-@-0  or  s-@-l,  during  normal  network  operation  while  assuring  error-free 
operation  prior  to  that  detection.  Continuous  error- free  operation,  however 
hinges  on  several  assumptions.  First,  it  is  assumed  that  initially  the 
network  is  free  of  all  fault3.  The  means  by  which  this  is  guaranteed  is 
not  specified.  It  is  also  assumed  that  the  most  probable  network  fault  is 
the  single  fault  and  that  the  occurrence  of  the  first  fault  is  detected 
prior  to  the  occurrence  of  a second  single  fault  during  normal  network 
operation.  This  allows  for  repair  of  the  network  so  that  detection  of  the 
second  single  fault  can  be  guaranteed.  Under  these  assumptions  at  most  one 
single  fault  is  present  in  the  network  at  any  given  time  and  continuous 
error-free  operation  is  assured. 
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2.3.  Self -Checking  Property 

Consider  an  irredundant  combinational  alternating  network  N with 
n inputs  (x^ ,x^) , (x^ ,x, ),...,  (xn,xn)  and  one  output  y which  represents  a 
function  f.  Assume  that  a network  fault  of  some  type  occurs.  For  a 
particular  input  (X,X)  either  the  fault  does  not  affect  network  operation, 
and  the  correct  alternating  output  is  produced,  say  (d,d),  or  one  of  three 
possible  errors  occurs.  If  the  fault  affects  N under  X only,  (fl,d)  is 
produced;  if  the  fault  affects  N under  X only,  then  (d,d)  is  produced;  and 
if  the  fault  affects  N under  both  X and  X,  then  (d,d)  is  produced.  Since  in 
the  fault-free  state  the  network  output  alternates  for  all  inputs,  errors  of 
the  first  two  types  are  considered  to  be  detectable,  whereas  an  error  of  the 
last  type  is  considered  to  be  undetectable.  The  network  output  for  this  case 
is  termer'  in  erroneous  alternating  output. 

Definition  2.5:  A network  is  self-checking  for  all  faults  from  a prescribed 

set,  F,  if  for  every  fault  from  F there  exists  at  least  one  input  (X,X)  which 
produces  a detectable  error  on  the  network  output,  and  there  exists  no  input 
(X,X)  which  produces  an  erroneous  alternating  output. 

If  F is  constrained  to  be  the  set  of  all  single  faults  of  the  stuck-at-0  or 
atuck-at-1  type  on  all  primary  network  inputs  and  all  network  lines,  then  it 
is  possible  to  derive  necessary  and  sufficient  conditions  that  the  alternating 
network  realizing  f be  self-checking.  But,  to  do  this  some  definitions  must 


first  be  made. 
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Definition  2.6:  A network  line  is  any  line  in  a network  other  than  a primary 

network  input.  (Branch  lines  from  fanout  points  are  considered  to  be 
distinct  network  lines.) 

Network  lines  are  labeled  with  small  letters  and  a fault  on  a line  is  denoted 
by  where  the  subscript  is  the  line  label,  and  the  superscript  is  the 
logical  value  at  which  the  line  is  stuck.  For  example,  in  Figure  2.3  an 
alternating  network  representing  the  function 

f ■ x]*2  + xlx3  + X2X3 

is  shown.  Network  lines  in  the  circuit  are  labeled  a -A.  Primary  network 
input  lines  are  labeled  with  the  variable  name.  (Note  that  a,  f,  b,  and  i 
are  defined  as  network  lines,  not  primary  network  input  lines,  as  they  are 
branch  li'.es  from  a fanout  point  on  a primary  network  input  line.)  If  a 
s-(a-l  fault  exists  on  a network  line,  say  e,  it  is  designated  on  the 
network  diagram.  Figure  2.3,  with  a small  x on  that  line.  The  fault  is 
denoted  [17]  as  f^;  that  is,  line  e atuck-at-1.  A s-@-0  line  fault  is 
designated  on  the  network  diagram  by  a small  o on  the  affected  line. 

Definition  2.7  : A path  is  an  ordered  sequence  of  lines  iDjU^...^  such  that 

lines  u)^  and  u^+^,  1 £ i < r-1  are  connected  through  either  a single  gate  or 
a fanout  point. 

Thus,  if  we  consider  non-trivial  paths,  only  can  be  a primary  network 
input  line  and  only  u>r  can  be  a network  output.  In  Figure  2.3  x^acegji,  de, 
k,  and  ehkX  are  all  paths.  The  path  k is  termed  a trivial  path.  In  the  case 
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of  path  x^acegjl,  network  lines  e and  g,  and  x^  and  a,  are  connected  through 
fanout  points. 

Definition  2 .8  : An  output  path  is  a path  (BjU^ . • .u>r  8UC^  that  is  the 

network  output  line. 

The  network  in  Figure  2.3  has  many  output  paths.  Examples  are  path  egj^, 
x^dehk^,  and  dehki. 

Definition  2 .9  : The  inversion  parity  of  a path,  P,  is  the  parity  of  the 

number  of  inversions  (NAND  gates,  NOR  gates,  or  inverters)  encountered  in 
tracing  the  specified  path,  P,  through  the  circuit  and  is  denoted  by  uu(P). 

For  the  output  paths  noted  above  w(egjX)  » 0,  iv(x^dehkX)  ■ 0,  and 
U)(dehkJ«)  » 1. 

Definition  2.10:  A path  tu1u,2..*tt,r  is  sensitized  if  for  an  input  such  that 

d,  ,d9 d , d^eto.l),  1<  i<  r is  present  on  lines  u,i»<U2 ' ’ ' ’ ,U>r  the  fault 

forces  U)2,,**,U)r  t0  ta^e  on  values  j*  * ' ' * ®r  * 

* j 

Definition  2 .1 1:  A line  fault  f is  sensitized  if  the  network  input  is  such 

a 

that  at  least  one  path  » • • • »^r  sensitized  where  uo^  ■ a and  is  the 

network  output,  and  the  logical  value  of  line  a in  the  absence  of  the  fault 
is  d. 

For  example,  in  Figure  2.3,  the  input  x^x^x^  ■ Oil  sensitizes  the  fault  f° 

through  the  output  path  ehk£,  since  normally  1,1,0, 1 is  present  on  e,h,k,£ 

whereas  the  fault  f°  forces  h,k,A  to  take  on  the  values  0,1,0.  Note  that 
e 
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i ■ J ■ 1 for  xlx2x3  ■ Oil.  The  fault  f*  shown  in  Figure  2.3  is,  however, 

not  sensitized  by  Oil  as  the  logical  value  on  line  e in  the  absence  of  the 

fault  under  Oil  is  1,  not  0.  The  input  X^X2X3  “ 010  however  sensitizes  both 

f^  and  the  path  ehkl. 
e 

Now,  with  the  foregoing  definitions  as  a basis  for  terminology, 
consider  again  the  irredundant  alternating  network  N with  n inputs  (x^,x^), 

^X2’X2^ (xn>xn)  and  one  outPut  y which  represents  a function  f.  Since 

N is  irredundant  and  since  all  inputs  (X,X)  are  possible,  to  show  that  N is 
self-checking  for  an  arbitrary  single  fault  it  is  only  necessary  to  show 
that  for  no  input  (X,X)  is  an  erroneous  alternating  output  produced  by  the 
network  due  to  the  fault. 

Le mma  2.1:  An  erroneous  alternating  output  is  produced  by  N under  the 
presence  of  a single  fault  with  input  (X,X)  iff  both  X and  X sensitize  the 
fault . 

Proof : Certainly  if  neither  X nor  X sensitize  the  fault,  then  the  output  of 

N under  (X,X)  is  the  correct  alternating  output  y ■ (f(X),f(X))  ■ (f(X),f(X)). 
If  only  X sensitizes  the  fault  then  y ■ (f(X),f(X))  ■ (f(X),f(X))  and  the 
fault  is  detected.  If  only  X sensitizes  the  fault  then  y ■ (f(X),f(X))  ■ 
(f(X),f(X))  and  the  fault  is  detected.  If  both  X and  X sensitize  the  fault 
then  y - (f(X),f(X))  - (f(X),f(X))  and  an  undetected  erroneous  output  is 
produced.  Q.E.D. 

Theorem  2 .3 : Any  arbitrary  alternating  network  N is  self-checking  for 

single  faults  on  primary  network  input  lines. 


,y  *■?' 
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Proof : Assume  primary  input  line  x^  Is  stuck-at-d.  If  X sensitizes  the 
fault,  x^  * d.  But  then  x^  ■ d,  and  5T  cannot  sensitize  the  fault.  Similarly, 
if  X sensitizes  the  fault  then  x^  « d.  But  then  x^  = d,  and  X cannot 
sensitize  the  fault.  So,  by  Lemma  2.1,  N is  self-checking  for  all  single 
faults  on  primary  network  input  lines.  Q.E.D. 

So,  having  obtained  Theorem  2.3,  to  show  that  an  alternating  network  is 
self-checking  for  all  single  faults  on  primary  network  inputs  and  network 
lines  it  is  only  necessary  to  show  that  the  network  is  self-checking  for 
faults  on  network  lines.  Achieving  the  self-checking  property  for  these 
faults,  however,  places  some  constraints  on  circuit  structure. 


2.4.  S<  if-Checking  Combinational  Structures 

Yamamoto,  Watanabe,  and  Urano  [36]  have  investigated  standard  two- 
level  AND/OR  and  OR/AND  alternating  networks  allowing  inverters  as  a third 
level  as  required  to  obtain  complemented  variables.  Such  networks  were 
shown  to  be  self-checking  for  all  single  stuck-at  faults  on  gate  or  inverter 
output  lines.  Other  more  general  combinational  network  structures,  however, 
can  be  shown  to  possess  the  same  self-checking  property  under  a generalized 
fault  set.  That  fault  set  is  the  set  of  all  single  line  faults  on  gate  or 
inverter  input  or  output  lines.  Three  network  structures  will  be  considered, 
the  Internal  fanout-free  network,  the  essentially  inverter-free  AND/OR/NOT 
network,  and  the  Inverter -free  network.  First,  consider  the  Internal  fanout- 
free  network. 
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Definition. 2.-. 12:  A network  is  internal  fanout-free  if  each  gate  or  inverter 
output  is  an  input  to  at  most  one  gate. 

Theorem  2.4:  Any  internal  fanout-free  alternating  network,  N,  is  self- 

checking for  single  faults. 

Proof : Let  N be  an  internal  fanout-free  network  containing  a single  fault 

on  an  arbitrary  network  line  'a',  say  f^,  where  de{o,l3.  By  way  of 

contradiction,  assume  that  N is  not  self-checking  for  the  fault  f^.  Then 

a 

there  exists  an  input  (X,X)  for  which  both  X and  X sensitize  f^  producing 

a 

an  erroneous  alternating  output.  That  is,  under  X 

y - d®iu(Px) 

where  P^  is  .he  output  path  from  'a'  sensitized  by  X,  and  under  X 

y - d®w(p  ) 

A 

where  P_  is  the  output  path  from  'a'  sensitized  by  X.  But  since  N is 
X 

internal  fanout-free  there  is  only  one  output  path  from  'a'.  That  is, 

P ■ P_  ■ P and  the  nonalternating  output 
x X 

(d®U)(P),  d®u>(P)) 

is  produced,  a contradiction.  Q.E.D. 

An  alternating  internal  fanout-free  network  is  shown  in  Figure  2.4  a).  The 
network  is  distinguished  from  a tree  network  in  the  strictest  sense  of  the 
term  since  fanout  of  primary  network  Inputs  is  allowed.  The  tree  network 
is  thus  a subclass  of  the  class  of  Internal  fanout-free  networks  and  is  self- 
checking for  all  single  faults  also. 
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Now,  consider  the  essentially  inverter-free  AND/OR/NOT  network. 

Definition  2.13:  An  essentially  inverter-free  AND/OR/NOT  network  is  an 

AND/OR/NOT  network  in  which  the  input  to  any  inverter  is  a network  input. 

Theorem  2.5:  Any  essentially  inverter-free  AND/OR/NOT  network,  N,  is  self- 

checking for  all  single  faults. 

Proof : The  proof  will  be  in  two  parts  a)  and  b). 

a)  Consider  a fault,  f^,  where  'a'  is  any  network  line  which  is  a gate 

cl 

input  or  output  or  an  inverter  output.  If  N is  not  self-checking  for  these 
faults  then  there  is  an  input  (X,X)  for  which  both  X and  X sensitize  the 
fault  producing  an  erroneous  alternating  output.  Letting  P^  and  P_  denote 
the  corresponding  paths  the  output  produced  is 

(d©u>(P  ),  d ® U) (P  ) ) . 

A A 

But,  ince  ^(PY)  * u>(P— ) m 0,  the  output  produced  becomes  (d,d),  which  is 
" X 

not  an  erroneous  alternating  output. 

b)  Nov;,  onsider  a fault,  f^,  where  'a'  is  any  inverter  input  line  which  is 
not  a pi imary  network  input  line.  (Such  a case  exists  when  both  an  input 
and  its  complement  are  used  to  realize  a function.)  If  N is  not  self- 
checking for  these  faults  then  there  is  an  input  (X,X)  for  which  both  X and 
X sensitize  the  fault  producing  an  erroneous  alternating  output.  Letting  P^ 

and  P_  denote  the  corresponding  paths  the  output  produced  is 
X 

(d©u>(Px),  d©UJ(P_)). 

But,  since  u>(p  ) ■ U)(P_)  ■ 1,  the  output  produced  becomes  (d,d)  which  is  not 
* X 

an  erroneous  alternating  output. 


Q.E.D. 
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The  alternating  essentially  inverter-free  AND/OR/NOT  network  is  a generaliza- 
tion of  the  structure  studied  by  Yamamoto  [36]  in  that  an  unlimited  number 
of  levels  may  be  utilized  in  the  AND/OR  portion  of  the  structure.  An 
alternating  network  meeting  the  structural  requirements  is  shown  in 
Figure  2.4  b).  Note  that  line  a,  the  inverter  input  labeled  in  the 
figure  is  the  type  of  network  line  considered  in  the  b)  part  of  the  proof 
of  Theorem  2.5. 

The  last  specific  structure  to  be  examined  is  the  inverter-f rae 
combinational  structure. 


Definition  2.14:  A network  is  inverter-free  if  no  inverter  or  inverting 

gate  is  present  in  the  network  structure. 

Theorem  2 j Any  inverter-free  alternating  network,  N,  is  self-checking  for 
all  unidirectional  faults. 

Proof : By  way  of  contradiction  assume  that  N is  not  self-checking.  Then 

for  at  least  one  input  X and  some  unidirectional  fault  f*J  . . . f^ 

1 2 r 

where  r < k,  the  number  of  network  lines,  both  X and  X sensitize  an  element 

d d d d — d 

of  (f  , f f ).  Let  X sensitize  f , X sensitize  f , where  l<i,j<r. 

12  _ r_  i _ J 

Now,  under  (X,X),  (f(X),f(X))  is  produced  since  X and  X both  sensitize  an 

element  of  the  fault  set.  Further,  under  X,  y ■ d © 0“d  is  produced  since 

all  paths  are  of  even  parity.  Similarly,  under  X,  y ■ d®0*d  must  be 

produced.  But  this  implies  that  f(X)  • f(X)*>f(X)  ■ f(X),  a contradiction. 

Sc  N Is  self-checking  for  all  unidirectional  faults.  Q.E.D. 
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f — ^2  *2*3 

a)  Internal  Fanout -Free  Network 


b)  Essentially  Inverter -Free  AND/OR/NOT  Network 


(f,f) 


f=  XjtXj+Xj) 

c)  Inverter  Free  Network 


FP-5048 


Figure  2.4.  Self-checking  alternating  combinational  structures. 
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An  inverter-free  alternating  network  is  shown  in  Figure  2.4  c).  The 
network  represents  the  function  f ■ x^x^+x^).  The  dualization  procedure 
outlined  in  Section  2.1  was  used  to  obtain  the  network  from  the  functional 
specification  of  f,  thus  requiring  a clock  i.  A clock  was  not  required 
for  a)  or  b)  as  the  function  realized  in  each  case  was  self -dual. 


2.5.  Necessary  and  Sufficient  Self-Checking  Conditions 

Many  combinational  structures  do  not  belong  to  one  of  the  network 
structure  classifications  shown  to  be  self-checking  in  Section  2.4.  This 
does  not  mean  that  the  network  in  question  does  not  possess  the  self- 
checking property.  Verification  that  the  network  is  self-checking, 
however,  1 more  difficult  and  may  require  computer  simulation. 

Theorem  2.7:  If  an  alternating  network  N is  self-checking  for  all  faults  on 

gate  and  inverter  outputs,  then  it  is  self-checking  for  all  tingle  faults. 
Proof:  Let  G be  any  network  gate  or  inverter.  Then 

u>(Px)  - w(P-) 

for  any  pair  of  output  paths  P and  P sensitized  by  X and  X respectively 

A X 

from  the  output  of  G.  Then,  any  pair  of  output  paths  P'  and  P.1  sensitized 

x X 

by  X and  X respectively  from  an  input  to  G,  say  a,  can  be  written  as 

P ' ■ a P for  the  path  sensitized  by  X,  and 

A A 

Pi  ■ a P_  for  the  path  sensitized  by  X. 

X X 


But  then  uj(p')  ■ uj(r1  ) since  u)(P  ) and  N must  therefore  be  self- 

x X x X - — __ 

checking  for  a fault  on  'a'.  Therefore  N is  self-checlTrtig--£oj^all  single 
faults.  Q.E.D. 


Thus,  by  Theorem  2.7,  to  show  that  a network  is  self-checking  for  all  single 
faults,  only  faults  on  gate  or  inverter  outputs  need  be  examined.  However, 
this  constraint  can  be  relaxed  somewhat. 

Definition  2.15:  A fanout  gate  or  fanout  Inverter  is  a gate  or  inverter 

whose  output  is  connected  to  more  than  one  gate  or  inverter. 

Definition  2.16:  A primary  Inverter  is  an  inverter  whose  input  is  a primary 

network  input  line  or  a branch  line  from  a primary  network  input  fanout 
pcint.  A secondary  inverter  is  any  inverter  which  is  not  a primary 
inverter . 

Theorem  2 .8  : An  alternating  network  N is  self-checking  for  all  single  faults 

iff  it  is  self-checking  for  all  single  faults  on  fanout  gates  and  secondary 
fanout  inverters. 

Proof : A fault  on  any  primary  inverter  input  or  output  cannot  be  sensitized 

by  both  X and  X and,  therefore,  cannot  cause  an  erroneous  alternating  output. 
Thus,  fanout  from  a primary  inverter  cannot  affect  the  self-checking 
properties  of  N in  any  case.  So,  consider  a fault  on  any  other  network  line 
'a1  that  is  a fanout  gate  or  secondary  fanout  inverter  output  line.  Either 
there  is  a unique  output  path  from  'a'  or  there  is  a unique  path  from  'a1  to 
an  input  of  a fanout  gate  or  secondary  fanout  inverter.  For  the  former  case 
we  know  the  network  is  self-checking  for  the  fault  by  Theorem  2.4.  So, 
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consider  the  latter  case.  Any  output  path,  P^,  sensitized  by  X from  'a'  can 
be  written 


and  any  output  path,  P-L,  sensitized  by  X from  'a'  can  be  written 

“ P*P_ 

X X 

where  P*  is  the  path  from  'a'  to  the  fanout  gate  or  secondary  fanout  inverter 

input,  and  P and  P are  the  output  paths  sensitized  by  X and  X respectively 
X X 

from  the  output  of  the  fanout  gate  or  secondary  fanout  inverter.  But, 

w(Px)  - w(P_), 

and  therefore, 

w(P')  " <*>(P-). 

A X 

So,  N mu  c be  self-checking  for  a fault  on  'a'  in  this  case  also.  Q.E.D. 

Theorem  2.9 : An  alternating  network,  N,  is  self-checking  for  all  single 

faults  iff  the  inversion  parity  of  output  paths  originating  on  a given 
fanout  gate  or  secondary  fanout  inverter  output  labeled  'a'  sensitized  by 
X equals  the  inversion  parity  of  like  output  paths  sensitized  by  X for 
every  (X,X)  such  that  both  X and  X sensitize  f^  for  d«0,l  and  for  every 
fanout  gate  or  secondary  fanout  inverter. 

Proof : By  Theorem  2.8  the  network  N is  self-checking  for  all  single  faults 

iff  it  is  self-checking  for  all  single  faults  on  fanout  gate  and  secondary 
fanout  inverter  outputs.  So,  consider  an  arbitrary  fanout  gate  or  secondary 
inverter,  G,  whose  output,  'a',  is  stuck-at-d.  If  an  erroneous  output  is 
to  be  produced  as  a result  of  the  fault,  by  Lemma  2.1  both  X and  X must 
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consider  the  latter  case.  Any  output  path,  P',  sensitized  by  X from  'a'  can 

A 

be  written 


p'  - p*p 

*X  X’ 

and  any  output  path,  pJ_,  sensitized  by  X from  'a'  can  be  written 

X 


p_L  - p*p_ 
X x 


where  P is  the  path  from  'a'  to  the  fanout  gate  or  secondary  fanout  inverter 

input,  and  P and  P are  the  output  paths  sensitized  by  X and  X respectively 
* X 

from  the  output  of  the  fanout  gate  or  secondary  fanout  inverter.  But, 


u>(Px)  - w(P-), 

and  therefore, 

iu(P')  - uj(p’). 

A X 

So,  N mu  c be  self-checking  for  a fault  on  'a'  in  this  case  also.  Q.E.D. 


Theorem  2.9:  An  alternating  network,  N,  is  self-checking  for  all  single 

faults  iff  the  inversion  parity  of  output  paths  originating  on  a given 
fanout  gate  or  secondary  fanout  inverter  output  labeled  'a'  sensitized  by 
X equals  the  inversion  parity  of  like  output  paths  sensitized  by  X for 

every  (X,X)  such  that  both  X and  X sensitize  fd  for  d»0,l  and  for  every 

a 

fanout  gate  or  secondary  fanout  inverter. 

Proof : By  Theorem  2.8  the  network  N is  self-checking  for  all  single  faults 

iff  it  i s self-checking  for  all  single  faults  on  fanout  gate  and  secondary 
fanout  inverter  outputs.  So,  consider  an  arbitrary  fanout  gate  or  secondary 
inverter,  G,  whose  output,  'a',  is  stuck -at -d.  If  an  erroneous  output  is 
to  be  produced  as  a result  of  the  fault,  by  Lemma  2.1  both  X and  X must 
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sensitize  the  fault.  But  by  hypothesis  for  any  such  (X,X),  u)(p  ) ■ ou(p_ ) 

* X 

and  the  detectable  nonalternating  output 


(d®u>(P  ),  d®u>(P  )) 

A 


is  produced.  The  network,  N,  must  therefore  be  self-checking  for  the  fault. 
Conversely,  if  there  is  an  (X,X)  for  which  both  X and  X sensitize  fd  for  an 

SL 

a-bitrary  gate  G with  output  'a',  while  the  inversion  parity  uj(P  ) does  not 

A 

equal  the  inversion  parity  u)(P_),  then  that  same  (X,X)  produces  on  the  output 


of  N 


X 


(d©aj(Px),  d©u)(P  )) 

which  in  this  case  is  an  erroneous  alternating  output  since  U)(P„)  t u>(P_). 

x X 

Q.E.D. 

The  significance  of  Theorems  2.7,  2.8,  and  2.9  lies  in  the  fact  that  in  order 
to  assure  that  a functional  realization,  which  does  not  admit  to  a classifi- 
cation as  one  of  the  structures  in  Section  2.4,  is  still  a self-checking 
realization,  it  is  only  necessary  to  simulate  the  output  under  fault 
conditions  on  fanout  gate  and  secondary  fanout  inverter  outputs  and  to 
compare  these  with  the  fault-free  outputs  so  as  to  determine  if  an  erroneous 
alternating  output  exists.  Since  such  a simulation  can  be  done  quickly,  an 
optimal  minimization  program  such  as  Davidson's  branch  and  bound  program  [12] 
could  be  modified  so  as  to  produce  an  optimal  self-checking  realization  from 
a dualized  functional  specification,  without  degrading  program  performance 
significantly. 

For  some  network  structures  not  of  the  type  considered  in 
Section  2.4  the  self-checking  property  can  be  deduced  by  inspection,  and  a 
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computer  simulation  is  therefore  not  required.  Corollary  2.1  specifies  the 
conditions . 

Corollary  2.1:  An  alternating  network,  N,  is  self-checking  for  all  single 

faults  if  all  output  paths  from  a given  fanout  gate  or  secondary  fanout 
inverter  are  of  identical  parity  for  every  fanout  gate  or  secondary  fanout 
inverter . 

As  an  example,  consider  the  alternating  network  shown  in  Figure  2.3.  We 
know  that  the  network  is  self-checking  if  it  is  self-checking  for  f^,  de{o,l}. 
However,  only  two  output  paths  egjJt  and  ehk£  originate  from  the  output  of  the 
only  fanout  gate  or  secondary  fanout  inverter,  and  they  are  both  of  the  same 
inversion  parity,  w(egjJi)  ■ u>(ehkjC)  ■ o.  So  by  Corollary  2.1  the  network  is 
self-chec  .ng. 

Thus  far  only  single  output  combinational  networks  have  been 
considered.  Multi-output  networks  are,  however,  important  structures.  If 
the  network  N is  a multi-output  network  then  the  definition  of  self-checking 
is  modified  somewhat. 

Definition  2.17;  A multi-output  network  is  self-checking  for  all  single 
faults  iff  there  exists  no  input  (X,X)  for  which  an  erroneous  alternating 
output  is  produced  unaccompanied  by  a nonalternating  output  on  another 
network  output  line. 

This  definition  is  somewhat  more  relaxed  than  the  definition  in  the  single 
output  case  and  should  lead  to  simpler  realizations  when  logic  is  shared  in 
producing  the  required  outputs  than  when  each  output  is  produced  with 


independent  logic.  As  an  example  of  the  multi-output  alternating  network 
consider  the  full  adder. 


Example  2.2:  The  full  adder  is  shown  in  Figure  2.5  a)  and  Karnaugh  maps 

specifying  the  outputs  and  CL  as  a function  of  the  inputs  a^,  and 

are  shown  in  Figure  2.5  b).  From  the  map  for 


Si  " Ci-laibi  + Ci-laibi  + Ci-laibi  + Ci-laibi 


B>  Si  " Ci-l(aibi+aibi>  + Ci-l(aibi+aibi>* 


Similarly,  from  the  map  for  C. 


Ci  “ aibi  + Ci-lbi  + Ci-lai 


Ci  " Ci-l(aiV  + aiV 


Based  on  these  equations,  a realization  for  the  full  adder  is  shown  in 
Figure  2.5  c).  The  network  must  be  an  alternating  network  since  and 
are  self-dual  functions.  The  network,  however,  is  not  self -checking.  (The 
fault  f°  produces  an  erroneous  alternating  output  under  (C^^a^b..  , Cj  ) = 

(000,111).)  A self-checking  realization  can  be  obtained  by  converting  the 
structure  shown  in  Figure  2.5  c)  into  an  internal  fanout-free  structure. 

The  resulting  network  is  guaranteed  to  be  self-checking  and  is  shown  in 
Figure  2.5  d). 

Now  consider  those  optimal  full  adder  networks  obtained  by  Liu, 
et  al  [22].  Of  the  thirty  networks  obtained,  six  presuppose  the  existence  of 
only  the  input  variable  and  not  its  complement.  These  six  networks  are  of 
interest  here  and  are  shown  in  Figure  2.6  a)-f).  Networks  a)  and  b)  are 
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optimal  NOR  adders;  networks  c)  and  d)  are  optimal  NOR/AND  adders;  and 
networks  e)  and  f)  are  optimal  NOR/NAND  adders.  Adders  a),  c),  and  e)  were 
optimized  with  no  level  restriction;  adders  b),  d),  and  f)  were  limited  to 
a maximum  of  3 levels. 

As  to  the  self-checking  properties  of  the  optimal  adders,  adder  b) 
meets  the  conditions  of  Corollary  2.1  and  is  therefore  self-checking. 

Adder  f)  has  no  reconvergent  fanout  and  is  self-checking  by  Theorem  2.4 
extended  to  the  multi-output  case.  Adders  a),  c),  d),  and  e)  are  at  first 
glance  not  self-checking.  But,  computer  simulations  based  on  Theorems  2.8 
and  2.9  verify  the  self-checking  property  of  these  networks  also.  For  the 
adder  in  Figure  2.5  d)  and  the  optimal  adders  b)  and  f)  in  Figure  2.6  no 
erroneous  alternating  output  is  ever  produced  on  or  S^.  As  a result  the 
subnetwr~\  realizing  C.,  and  the  subnetwork  realizing  are  therefore  self- 
checking in  themselves.  For  the  optimal  adders  a),  c),  d),  and  e)  in 
Figure  2.6,  an  erroneous  alternating  output  can  be  produced  on  or  S^., 
but  such  an  output  is  always  accompanied  by  a nonalternating  output  on 
or  C^,  respectively,  thus  meeting  the  requirements  specified  in  Definition 
2.17.  But,  in  each  cane  neither  the  subnetwork  realizing  nor  the  sub- 
network realizing  Si  is  self-checking  in  itself.  Their  union,  however, 
sharing  logic,  is  self -checking.  This  illustrates  the  advantages  mentioned 
about  sharing  logic  in  the  multi-output  case. 
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3.  SELF-CHECKING  ALTERNATING  SEQUENTIAL  MACHINE 


3.1.  Sequential  Machine  Model 

Consider  the  strongly  connected  synchronous  sequential  machine, 
M(I,0,S,S ,\) , with  clock  $ of  frequency  f and  period  T represented 
schematically  in  Figure  3.1.  The  circuit  has  a finite  number  n of  input 
terminals.  The  signals  entering  the  circuit  via  these  terminals  constitute 

the  set  x^}  of  input  variables.  The  set  L of  2°  distinct  inputs 

is  called  the  input  alphabet  I,  and  each  configuration  is  referred  to  as  a 
symbol  of  the  alphabet.  Thus  the  input  alphabet  is  given  by 

I ■ £ Iq  » 1^ » • • • *IL)  for  Ip  “ xix2  ' * 'xn*  ®-p— L and  x^eto.l},  l£i<n. 

Similarly,  t*.e  circuit  has  a finite  number  l of  output  terminals  which 

, i Jt 

define  ti  set  . . . .z^j  of  output  variables.  The  set  M of  2 ordered 

ji-tuples  is  called  the  output  alphabet  and  is  given  by 

0 * [0o,0^ , . . . ,0M)  for  0^  - z^2' . ■ 0<q<M  and  z^lo.l},  1 < i ■<  jC  . 


The  signal  at  the  output  of  each  memory  element  is  referred  to  as  a state 
variable,  and  the  set  (y^ ^2* • • • constitutes  the  set  of  state  variables. 
The  combination  of  values  at  the  outputs  of  the  m memory  elements  y^  >"^2 » * • • »ym 
defines  the  present  state  of  the  machine.  The  set  R of  2m  m-tuples  constitute 
the  entire  set  of  states  of  the  machine 


S • Is  , S .,..., S_ } for  S “y,y,...y  , 0<8<R  and  y «(o,l},  l<i<m. 

K 8 1 a ID  1 

The  external  inputs  x-.x^,...^  and  the  values  of  the  state 
variables  y1,y2#..*#ym  are  »PPHed  to  the  combinational  circuit,  C.  This 


circuit  in  turn  produces  the  outputs  z^,z2,...,z^  and  the  feedback  variables 
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Y,,Y0,...,Y  • The  values  of  the  Y's  which  appear  at  the  output  of  C at 
l z m 

time  t are  Identical  with  the  values  of  the  state  variables  at  t4T  and 
therefore  define  the  next  state  of  the  machine.  The  machine  M thus  realizes 
the  transformations 

6 : SX  I - S 

X : SX  I - 0. 

Normally  these  transformations  are  described  by  means  of  a state  table  or  a 
state  diagram.  Of  interest  here  is  the  state  table.  It  has  a ■ 2°  columns, 
one  for  each  input  symbol,  and  b rows,  one  for  each  state  of  the  machine. 

For  each  combination  of  input  symbol  and  present  state,  the  corresponding 
entry  specifies  the  output  that  will  be  generated  and  the  next  state  to 
which  the  machine  will  go.  The  succession  of  states  through  which  a 
sequential  machine  passes,  and  the  output  sequence  which  it  produces  in 
response  to  a known  input  sequence,  are  specified  uniquely  by  the  state 
table  and  the  initial  state,  where  by  initial  state  we  refer  to  the  state  of 
the  machine  prior  to  the  application  of  the  input  sequence. 


3.2.  Alternating  Sequential  Machine 

An  alternating  sequential  machine  M,  associated  with  M can  be 

A 

defined.  Such  a machine  has  the  property  that  state  variables  and  output 
variables  alternate  in  response  to  alternating  inputs. 

Definition  3.1:  An  alternating  sequential  machine  associated  wiLh  M is  a 

sequential  machine  having  the  property  that  for  Inputs  (1^,1^),  1 < i < L, 
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alternating  in  synchronism  with  4,  secondary  variables  yj,  1 < j 
output  variables  z^,  1 < k < alternate  in  synchronism  with  4, 
maintaining  the  next  state  and  output  relations  realized  by  M. 


< m,  and 
while 


Thus,  for  any  alternating  sequential  machine  associated  with  M, 

°A  " ^0o’0o>*<0l>0l)»-”»(°M’0M)} 

SA  " ^ (So’^o^’  (Si*^i) (SR,SR^* 


Now,  consider  the  sequential  machine,  M*,  modeled  in  Figure  3.2. 

The  inputs  x^,x2,...,xn  are  assumed  to  alternate  in  synchronism  with  4.  The 

combination;!1  circuitry,  C , is  a self-checking  alternating  circuit  realizing 

the  functions  6 and  X of  M.  The  clock  line,  4,  of  period  T and  frequency  f 

shown  a an  input  to  C , is  used  as  the  added  variable  required  to  dualize 

A 

6 and  X if  they  are  not  already  self-dual.  And,  the  clock,  4 , of  period  T/2 

and  frequency  2f,  is  in  phase  with  4.  (The  clock  4 can  be  considered  to  be 

derived  from  4^.)  To  analyze  the  operation  of  M*  assume  that  time  t is  the 

beginning  of  an  arbitrary  clock  period  and  that  at  time  ^5^2 •••ym  “ Ss 

and  yjy2...y^  “ Sg  (Figure  3.3).  If  (1^,1^)  is  applied  as  input  at  time  t 

T — 

then  I(t)  ■ 1^,  I(t  +j)  ■ 1^,  since  Inputs  alternate  in  synchronism  with  4. 
Further, 

yj(-)  ■ yt(t), 

yi(t  +2>  " 

Thus,  all  Inputs  to  C.  and  therefore  all  outputs  from  C alternate  in 

A A 

synchronism  with  4.  Since  realizes  6 in  producing  , 1 < i < m, 
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Yi(t) " vi(t>’S(t>> ■ 6<W 
Vt+f>  ■ VI(t+2>-s<t+^>  ■ vvv  ■ *<VS.>- 

Therefore, 

yt(t+T)  - y^(t  + j)  - Y^t)  - 6(ik,sa) 

YfCt+y)  - yJ(t+T)  - Yt(t+J)  - 6(ik,Ss) 

and  since  C,  realizes  X in  producing  z. , 1 < i < £, 

A 1 — ~ 

Zi(t)  - XA(I(t),S(t))  - Xtf^) 

zA(t+j)  - xA(i(t+|),s(t+J))  - xA(ik,ss)  ■ X(ik,ss). 

The  sequent' al  machine  M*  thus  produces  $ -synchronized  alternating  secondary 
variables  and  outputs  in  response  to  $ -synchronized  input  variables  while 
maintaining  the  next  state  and  output  relations  realized  by  M as  required 
by  Definition  3.1,  and  is  therefore  an  alternating  sequential  machine 
associated  with  M provided  the  initial  state  is  set  in  the  y flipflops  and 
the  complement  of  the  initial  state  is  set  in  the  y'  flipflops  on 
initialization. 


3.3.  Self-Checking  Capability 

As  could  be  expected,  the  alternating  sequential  machine,  M*,  has 
some  fault  detecting  capabilities.  In  fact,  all  single  stuck-at  faults  on 
lines  in  the  feedback  and  output  combinational  circuitry,  CA>  and  on  the 
memory  element  input  and  output  lines  can  be  detected.  If,  in  addition,  it 
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can  be  guaranteed  that  no  erroneous  alternating  outputs  are  produced  prior 
to  the  fault  detection  then  M*  is  a self-checking  alternating  sequential 
machine.  The  ideas  are  formalized  by  the  following  definition. 

Definition  3.2:  The  alternating  sequential  machine,  M*,  is  self-checking 

for  all  faults  from  a fault  set  F iff  for  every  fault  from  F there  exists  a 

state  (Si,Si)eSA  and  an  input  (Ij,Ij)ciA  which  produces  a nonalternating 

(detectable)  output  on  Y^ , . . . ,Ym>  z^ , , . . . , z^  ^ or  z^  and  no  state 

(S. ,S. )es  and  input  (I  ,T. )ei  for  which  an  erroneous  alternating  output  is 
1 ^ A j j A 

produced  prior  to  a nonalternating  output. 

Since,  in  general,  the  alternating  circuit  CA  in  M*  is  not 
exercised  by  all  possible  input  combinations,  it  is  assumed  that  CA  has  been 
designed  t^  be  irredundant  with  respect  to  the  input  combinations  encountered. 
With  th4 h as  an  assumption  the  following  theorem  can  be  proved. 

Theorem  3.1:  The  alternating  sequential  machine,  M*,  is  self-c'xecking  for 

all  single  faults  on  lines  in  C.  or  on  input  and  output  lines  associated  with 

A 

the  memory  elements. 

Proof : First  consider  a fault  on  any  line  in  CA>  Since  M is  strongly 

connected  so  is  H*.  So,  any  state  in  ff*  can  be  reached  from  any  other  state 
by  the  application  of  the  proper  input  sequence.  And  since  CA  is  self- 
checklng  and  Irredundant  with  respect  to  the  state  and  input  space  there  is 
a state  (S^S^)  and  an  input  (Ij,Tj)  which  produces  a nonalternating  output 
on  some  output  of  C , and  no  state  or  input  which  produces  an  erroneous 

A 

alternating  output  prior  to  such  a nonalternating  output.  Since  the  non- 
alternating output  appears  on  Yj ^ , • • • ,Ym,  zi- 1 or  zl’  mu8t 
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be  self -checking  for  these  faults.  Now,  consider  a stuck-at-d  fault  on  any 
memory  input  or  output  line.  Such  a fault  must  manifest  itself  eventually 
a9  y^  stuck-at-d  for  some  i,  1 < i < m.  Since  is  se1 f-checking  for  all 
single  faults  on  primary  network  inputs,  a nonalternating  output  appears  on 
Yi .Y^ , . . . ,Ym>  z^,z2,...,z^  ^ or  z^  simultaneously  with  or  prior  to  an 
erroneous  alternating  output  and  frf*  must  be  self-checking  for  these  faults. 

Q.E.D. 

The  self-checking  capability  of  the  sequential  machine  M*  was 
obtained  by  encoding  the  state  variables  y^,  1 < i < m,  in  time.  While  such 
an  encoding  has  the  advantage  that  the  secondary  state  variable  assignment 
is  not  constrained,  it  has  the  disadvantage  of  doubling  the  number  of 
memory  elements  required.  However,  the  added  set  of  memory  elements  serve 
a double  arpose  as  will  be  shown  in  the  following  chapter. 

To  illustrate  the  techniques  involved  in  designing  an  alternating 
sequantial  machine  consider  an  alternating  sequential  machine  representing 
a one-input,  one-output  sequence  detector  which  produces  an  output  1 every 
time  the  sequence  0101  is  detected  and  an  output  0 at  all  other  times. 

Example  3.1:  The  0101  sequence  detector  has  been  designed  as  a conventional 

sequential  machine  in  Kohavi  [21].  The  state  table  for  the  machine  is  given 
in  Figure  3.4  a).  As  there  are  four  distinct  states  in  the  state  table, 
two  memory  elements  are  required  in  the  sequential  machine.  Selecting  the 


state  assignment 
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c)  Excitation  and  Output  Maps 


Figure  3.4.  Sequence  detector. 
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yly2  ' 00  ‘ So 
yly2  ' 01  ’ S1 
yly2  " 11  ' S2 
yly2  ‘ 10  " S3> 

transition  and  output  tables  can  be  constructed,  Figure  3.4  b).  From  these 
tables  Karnaugh  maps  specifying  the  output  function,  z^,  and  the  next-state 
variables,  Y^  and  Y0 , can  be  constructed,  Figure  3.4  c)  and  standard  two- 
level  realizations  of  z^,  Y^,  and  Y2  yield  the  conventional  0101  sequence 
detector,  Figure  3.4  d). 

The  alternating  sequential  machine  representing  the  0101  sequence 

detector  is  obtained  by  first  dualizing  the  functional  descriptions  of  z^, 

\ ^ , and  Y„  to  form  functional  specifications  for  z^,  Y^,  and  Y2*.  These 

specifications  are  shown  as  Karnaugh  maps  in  Figure  3.5.  These  functions 

are  ttien  realized  in  two-level  logic  and'  utilized  as  C.  in  the  alternating 

A 

sequential  machine.  Figure  3.6.  The  combinational  block  C thus  has  as 

\ A 

inputs  (x^,x^)  and  the  (0,1)  clock  $,  and  as  outputs,  the  machine  output 
(z^.Zj)  and  the  next-state  outputs  (Y^,Y^)  and  (Y2>Y2).  Four  D-flipflop 
memory  elements  are  required  in  the  alternating  machine,  and  these  are 
configured  as  specified  in  Figure  3.2,  clocked  by  a clock  of  period  T/2. 
The  conventional  machine  utilized  12  gates  and  2 D-flipflop  memory  elements. 
The  alternating  machine  required  19  gates  and  4 D-flipflop  memory  elements. 
Thus,  gate  count  was  Increased  by  roughly  a factor  of  1.5  and  memory  element 
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count  by  2.  Also,  to  this  added  cost  must  be  Included  the  cost  of  the 
alternating  checker  which  monitors  (Y^.Y^),  and  (Y2»Y2)  80  38  t0 

indicate  the  presence  of  nonalternating  signals  on  these  lines.  The 
alternating  checker  is  the  subject  of  the  next  chapter. 
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4 . ALTERNATING  CHECKERS 

4.1.  Adjoint  Alternating  Checker 

In  any  practical  alternating  logic  network,  some  means  must  be 
provided  to  monitor  network  output  lines  (in  the  case  of  synchronous 
machines,  network  output  lines  and  feedback  lines)  so  as  to  provide  an 
indication  of  the  occurrence  of  nonalternating  signals  on  these  lines. 

Any  network  which  performs  this  function  is  an  alternating  checker.  The 
adjoint  alternating  checker  is  one  such  checker. 

Definition  4,1:  An  adjoint  alternating  checker  is  a single  output  network 

which  produces  in  response  to  synchronized  alternating  inputs  a synchronized 
alternating  output  and  produces  in  response  to  one  or  more  synchronized 
nonaltern'ting  inputs  a synchronized  nonalternating  output. 

An  adjoint  alternating  checker  monitoring  an  r output  alternating  combina- 
tional network  N is  shown  in  Figure  4.1.  The  outputs  of  the  network  N, 
f^,f2»...,fr  are  system  outputs  but  also  are  inputs  to  the  alternating 
checker.  The  output  of  the  alternating  checker,  p,  is  also  a system  output 
and  1 8 used  for  fault  indication.  Under  fault-free  conditions  in  response 
to  a synchronized  alternating  input  (X,X),  r synchronized  alternating  outputs 

(f^.f^) , (f 2 , f 2 ) and  (fr«fr)  are  produced  by  N.  These  outputs  are 

monitored  by  the  checker  which  produces  a synchronized  alternating  output 
(p,p)  in  response  to  them.  If  a fault  exists  in  N and  N is  self-checking 
there  is  an  input  (X,X)  for  which  a nonalternating  output,  (f^.f^)  or 
(fi’^i>* i*  Produced  on  8CMBe  output  f . This  nonalternating  output  as 


Figure  4. 


FP  - 3082 


. Alternating  network  N and  adjoint  checker. 
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input  to  the  checker  causes  a nonalternating  checker  output,  (p,p)  or  (p,p) , 
indicating  the  presence  of  that  fault.  A combinational  realization  for  the 
adjoint  alternating  checker,  however,  does  not  exist  as  the  following 
theorem  shows. 

Theorem  A . 1 : A combinational  adjoint  alternating  checker  does  not  exist. 

Proof : Assume  that  the  adjoint  checker  with  r inputs  ,uu^  ,0)3 , . . . , and 

and  one  output  p can  be  realized  with  combinational  logic  and  suppose  that 

u).u)0...u)  « v,v„...v  maps  to  d where  v.,v.,...,v  and  deio.l).  Then 

12  r 12  r 1 2 r 

VlV2‘‘”Vr  tnust  111315  to  ^ as  t*le  output  must  alternate  when  alternating  inputs 

are  applied.  Further,  all  other  u)  ou  ...uu  such  that  u),u>  . . .0)  + v,v„...v 

12r  12rl2r 

must  map  to  d since  the  output  must  be  nonalternatin.g  for  nonalternating 
inputs.  Now  consider  ^]v2*,,vr  and  8°^  must  map  to  d as 

neither  equals  v^v2'*,vr  and > therefore,  under  (v^v^ . . .v^, v^v^v^. . .v^) , an 
alternating  input,  the  nonalternating  output  (d,d)  is  produced.  The  adjoint 
alternating  checker  cannot,  therefore,  be  combinational.  Q.E.D. 

While  the  adjoint  alternating  checker  cannot  be  realized  in  a combinational 
structure,  a combinational  alternating  checker  exists  which  is  capable  of 
performing  the  checking  function  for  certain  classes  of  network  structures. 
This  checker  is  discussed  in  the  following  section. 


4.2.  Semi -Ad joint  Alternating  Checker 

Some  alternating  networks  are  structured  such  that  as  a result  of 
a stuck-at  fault,  at  most  one  network  output  (or  feedback  line  in  the 
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Now,  consider  an  r-lnput  exclusive-OR  tree  where  r Is  odd,  and  let 
the  inputs  be  designated  . . . ,u)^. 

Theorem  4.2:  The  r-input  exclusive-OR  tree,  C,  is  a semi-adjoint  alternating 

checker  for  odd  r. 

Proof : Assume  that  synchronized  alternating  inputs  are  applied,  (iu,iE)  - 

(u)i<D2...u>r»(Bi‘V-'<JV)  where  u;  has  l l's  and  u),  m l's.  Further,  assume  that 
C produces  (a,b)  in  response  to  input  <uo ,uu) . Now,  since  the  exclusive-OR 
tree  produces  an  output  of  1 when  the’  parity  of  the  number  of  l's  on  its 
input  lines  is  odd,  a * PQ(i)  where  Pq  is  the  odd  parity  function. 

Similarly,  b ■ Pq  (m) . But  m ■ r-jf  for  alternating  inputs.  So,  b ■ PQ(r-A). 
Now  if  l is  odd  a“l.  However,  since  r is  odd,  r -A  must  be  even,  PQ(r-A)»0, 
and  b“0.  An  alternating  output  is  thus  produced.  If  A is  even,  a ■ 0,  r -A 
is  odd,  PQ(r-A)  ■ 1,  and  b*l.  An  alternating  output  is  thus  produced  for 
this  case  also. 

If  at  most  one  input  does  not  alternate  then  in  effect  the  circuit 

monitors  the  parity  of  the  other  alternating  inputs  producing  an  even  parity 

function  Pg  if  its  nonalternating  line  is  (1,1)  and  an  odd  parity  function 

?o  if  the  nonalternating  line  is  (0,0).  Letting  A ' be  the  number  of  l's 

on  the  alternating  lines  in  u)  and  m'  be  the  number  of  l's  on  the  alternating 

lines  in  u),  a ■ P^ (/ 1 ) , b ■ Pe(r-l-i')  ■ ■ a since  r-1  is  even  if  the 

nonalternating  line  is  (1,1).  And,  a ■ P (l) , b - P (r-l-A')  ■ P (!')  ■ a 

o o o 

if  the  line  is  (0,0).  Thus,  a nonalternating  output  is  produced.  The 
exclusive-OR  tree  is  therefore  a semi -adjoint  alternating  checker  for  odd  r. 

Q.E.D. 
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If  an  even  number  of  lines  is  to  be  monitored  it  is  only  necessary 
to  tie  the  unused  checker  input  line  to  the  clock  $.  This  application  is 
illustrated  in  Figure  4. 3. where  4 output  lines  from  a combinational  network 
are  monitored  using  a 5-input  exclusive-OR  tree  composed  of  3-input 
exclusive-OR  gates.  Note  that  the  combinational  network  does  not  utilize 
shared  logic  and  can  therefore  be  monitored  with  a semi-adjoint  alternating 
checker  as  shown. 

So  far,  only  faults  in  the  monitored  network  have  been  considered. 
Faults,  however,  may  also  occur  in  the  checker  itself.  The  self-testing 
property  of  the  alternating  checker  assures  that  a fault  signal  is  produced 
on  the  checker  output  as  a result  of  that  fault  while  the  monitored  network 
functions  normally. 

Definition  4.3:  An  alternating  checker  is  self-testing  if  for  every  single 

stuck-at  fault  on  checker  gate  input  and  output  lines,  there  exists  a 
network  output  which  as  input  to  the  checker  produces  a fault  indication  as 
output . 


Theorem  4.3:  The  exclusive-OR  semi-adjoint  alternating  checker  is  self- 

testing if  the  number  of  gate  inputs  to  each  exclusive-OR  gate  is  odd. 

Proof : Consider  a fault  on  line  g,  f^,  in  an  exclusive-OR  tree.  The  fault 

partitions  the  set  of  checker  inputs  . . . ,u)^]  into  two  sets.  One  set, 

S,  contains  those  which  are  inputs  to  the  subtree  whose  output  is  g and 
the  other  set,  R,  contains  all  remaining  inputs.  Now,  the  number  of  inputs 
to  the  subtree  whose  output  is  g must  be  odd  since  only  odd  input  exclusive-OR 
gates  are  used.  That  is,  #|s|  "a  is  odd.  But  then,  #|r|  ■ r-a  ■ b where 
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r is  the  total  number  of  checker  inputs.  Since  r is  odd  and  a is  odd,  b is 

even.  Now,  consider  an  input  such  that  uo^  - 1 if  uu^eR.  Since  the  faulty 

checker  essentially  performs  the  function  C . ■ (S  u>  )©d,  d is  produced 

fa  w ®R  1 
g 1 

with  u)  as  input.  With  u)  as  input,  every  <J^cR  is  0 and  d is  produced  for  this 
case  also.  So,  a nonalternating  output  (d,d)  is  produced  as  a result  of 
application  of  (u),iU)  and  (u>,uJ)  therefore  constitutes  a test  for  f^.  Q.E.D. 

As  a result  of  the  above  theorem  the  alternating  system  shown  in 
Figure  4.3  is  self -checking  for  all  single  faults  of  the  stuck-at  type  in 
both  the  alternating  network,  N,  and  its  checker,  C. 


4.3.  Two-Rail  Alternating  Checker 

While  the  semi-adjoint  exclusive-OR  checker  is  an  inherently 
simple  checker,  its  use  constrains  the  network  structure  in  a manner  that 
may  be  impractical  in  some  cases.  For  this  reason  a checker  which  produces 
a fault  indication  when  one  or  more  checker  inputs  do  not  alternate  is 
desirable.  One  such  checker.  Figure  4.4,  utilizes  an  r-input  totally  self- 
checking  (TSC)  two-rail  checker  as  a subnetwork.  This  two-rail  checker  has 
been  studied  in  the  literature  [1]  and  has  the  following  properties: 

a)  Inputs  to  the  TSC  two-rail  checker  are  r input  pairs,  u^,u^, 

1 < i < r.  Output  from  the  checker  is  a single  output  pair  v,v'. 

b)  The  TSC  two-rail  checker  is  code  disjoint.  That  is,  if  every  input 

pair  u^,u^  is  two-rail  u^  ■ , 1 < i < r,  then  the  output  v,v'  is 

two-rail,  v'  «v.  But,  if  one  or  more  input  pairs  are  not  two-rail 
then  the  output  v,v'  is  not  two-rail,  v'  1*  v. 


*•?  Vy 
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c)  The  TSC  two-rail  checker  is  self-testing.  That  is,  for  any  stuck-at-d 
fault  on  any  checker  gate  input  or  output  there  exists  a set  of  r 
two-rail  inputs  which  when  applied  to  the  two-rail  checker  produces 
a checker  output  which  is  not  two-rail. 

The  two-rail  checker  when  used  as  a subnetwork  of  the  alternating  checker  is 
preceded  by  a set  of  D-flipflop  memory  elements.  One  such  element  is  used 
on  each  input  line  so  as  to  produce  r input  pairs  from  the  r alternating 
inputs  applied  to  the  alternating  checker.  These  r input  pairs  are  then 
applied  to  the  two-rail  checker  as  u^u^,  1 < i < r.  Thus,  if  r $ -synchronized 
alternating  inputs  are  applied,  r two-rail  pairs  u^,u^,  u^_u^,  1 < i < r, 
are  produced  as  input  to  the  two-rail  checker  during  the  'O'  of  the  clock. 

As  a result,  during  that  half-period,  the  two-rail  checker  output  is  also 
two-rail,  1 *v.  If  one  or  more  of  the  r $ -synchronized  inputs  are  non- 
alternating, one  or  more  of  the  two-rail  checker  inputs  are  not  two-rail  and 
the  two-rail  checker  output  v,v'  during  the  'O'  of  the  clock  is  not  two-rail 
either,  v'  + v.  The  two-rail  checker  outputs  v,v'  are  latched  using  two 
additional  D-flipflop  memory  elements  at  the  beginning  of  each  clock  period. 

The  resulting  alternating  checker  output  p,p'  is  a representation  of  v,v' 
with  period  T,  where  T is  the  period  of  the  clock  i.  Specifically,  during 
any  clock  period  p,p'  assumes  the  value  on  v,v'  during  the  'O'  of  the  clock 
in  the  previous  period.  Any  fault  detected  by  the  alternating  checker  is 
thus  indicated  on  p,p'  as  0,0  or  1,1  in  the  clock  period  following  the 
sensitization  of  the  fault.  A 0,1  or  1,0  on  p,p'  indicates  normal  operation 
during  the  previous  clock  period. 
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Theorem  4.4 : The  two-rail  alternating  checker  is  self-testing. 

Proof : Consider  any  single  stuck-at  fault  on  lines  in  the  two-rail  TSC 

checker.  For  any  such  fault  there  exists  a two-rail  input  u = u.u  . ,.u_ 
which  tests  for  that  fault  as  the  two-rail  TSC  checker  is  itself  self- 
testing. But  then,  input  C“,ou)  ■ (u.u)  must  test  for  that  fault  in  the 
alternating  checker.  That  is,  under  alternating  input  (U),u>)  - (u,u),  a 
fault  indication,  v,v'  ■ 0,0  or  1,1  is  produced  on  the  TSC  two-rail  checker 
output.  That  fault  indication  then  appears  on  the  output  p,p’  during  the 
following  clock  period  indicating  the  existence  of  the  fault.  Now  consider 
any  line  fault  stuck-at -d  on  memory  elements  preceding  the  two-rail  TSC 
checker.  Any  such  fault  must  manifest  itself  as  u^.u^  ■ d,d  for  any  (uj.uJ) 
such  that  ■ (d,d).  However,  if  u^  j u^  then  v'  + v.  Therefore 

p'  j4  p ir  the  following  clock  period  and  the  fault  is  detected.  Similarly, 
line  faults  on  the  output  memory  elements  are  also  detected  and  the  two-rail 
alternating  checker  is  self-testing.  Q.E.D. 

Thus,  any  line  fault  on  any  memory  element  input  or  output  or  any  line 
fault  within  the  two-rail  checker  itself  manifests  itself  as  a fault  signal. 
Any  alternating  system  utilizing  the  two-rail  alternating  checker  for 
monitoring  network  lines  is  therefore  self-checking  for  all  single  faults. 

The  two-rail  alternating  checker  is  somewhat  costly  as  a delay 
element  must  be  added  for  each  monitored  network  line.  This  restriction 
can  be  relaxed  in  the  case  of  the  synchronous  machine.  There,  machine 
outputs  z^,Z2,...,z,  are  monitored  in  normal  fashion  using  a delay  element  in 
the  two-rail  alternating  checker  for  each  of  the  l output  lines.  The  feedback 


lines  Y^,\'2, . . . ,Ym  are  applied  to  the  checker  as  Uj+^,u j+2 ui+m  and 

lines  yj.y^.  • • • .yj,  become  Ujj+1»u4+2> • • • »ui+m*  (Note  that  r - A+m. ) Thus, 
no  delay  elements  are  required  in  the  two-rail  alternating  checker  for 
Yj ,Y2 , . . . ,Ym.  A total  of  m delay  elements  is  eliminated  by  utilizing  delay 
elements  already  used  in  the  synchronous  machine. 
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5.  COST  OF  ALTERNATING  LOGIC  IMPLEMENTATION 

5.1.  Introduction  and  Summary  of  Results 

The  implementation  cost  of  any  design  method  that  yields  networks 
with  a measure  of  fault  detection  capability  is  of  major  concern.  Results 
in  this  area  are,  however,  somewhat  sparse  as  design  of  fault  tolerant 
digital  systems  is  a relatively  new  field.  Of  those  design  methods  where 
implementation  cost  is  known,  triple  modular  redundant  (TMR)  design  and 
quadded  logic  design  are  most  classic.  In  TMR  design  [11,16]  basic  circuitry 
is  increased  by  a factor  of  3.  To  this  cost  must  be  added  the  cost  of  the 
voter,  which  may  appear  as  a single  unit  or  may  itself  be  triplicated. 
Implementation  of  quadded  logic  design  [11,16]  requires  basic  circuitry 
to  be  increased  by  a factor  of  4 as  each  gate  is  quadrupled  in  the  design. 
Both  of  tne  above  methods  are  fault  masking  techniques. 

Alternating  logic  design  is  a design  method  which  yields  totally 
self-checking  digital  networks  which  do  not  mask  a fault  but  simply 
indie.’  te  its  presence.  In  order  to  get  a feel  for  its  cost,  self-checking 
alternating  NOR  networks  representing  all  218  three  variable  functions  were 
obtained.  These  networks  were  compared  with  optimal  NOR  realizations  [18] 
for  each  of  the  218  three  variable  functions,  obtaining  in  each  case  the 
ratio  between  the  number  of  gates  in  the  self-checking  alternating  realiza- 
tion to  the  number  of  gates  in  the  optimal  three  variable  realization.  For 
the  218  functions  examined  these  ratios  varied  from  1 to  7.  Those  functions 
with  a ratio  of  1 were  the  self-dual  three  variable  functions  whose  optimal 
NOR  realization  had  sufficient  structural  properties  to  be  self-checking 
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also.  Eight  of  the  218  functions  were  in  this  class.  Only  one  function  had 
a ratio  of  7.  That  function  was  a +b  + c,  realizable  as  a simple  NOR  gate  in 
a conventional  design  but  requiring  7 gates  in  a self-checking  alternating 
representation.  Four  of  the  218  functions  had  a ratio  greater  than  3.  The 
mean  for  all  218  functions  was  1.85.  This  figure  might  reasonably  be 
compared  with  the  figure  for  duplicating  machines,  namely  2. 

The  mean  self-checking  alternating  cost  ratio,  1.85,  obtained  is 
not  guaranteed  to  be  optimal.  That  is,  a self-checking  alternating  network 
may  exist  which  represents  a given  three  variable  function  while  using 
less  NOR  gates  than  that  network  used  in  obtaining  the  above  comparison. 

A lower  bound  to  the  mean,  however,  can  be  formulated  from  knowledge  of  the 
optimal  NOR  realization  of  the  alternating  network,  not  necessarily  self- 
checking. representing  each  of  the  218  three  variable  functions.  To  this 
end  optimal  NOR  networks  for  all  self-dual  functions  of  A variables  were 
obtained.  These  networks  were  associated  with  each  of  the  218  three  variable 
functions  they  represent  in  order  to  form  an  optimal  ratio  in  each  case. 

The  mean  ratio,  1.63,  was  then  calculated.  Thus,  the  mean  self-checking 
alternating  cost  ratio  is  bounded  from  below  by  1.63. 

The  mean  self-checking  alternating  cost  ratio,  1.85,  does  not 
Include  the  cost  of  the  alternating  logic  checker.  Any  implementation  of 
an  alternating  logic  design  must  of  course  Include  this  cost  in  its  justi- 
fication, just  as  the  voter  cost  must  be  considered  in  TMR  system  design. 

In  the  following  sections  the  data  supporting  the  results 
sunmarized  here  are  presented,  including  NOR  network  diagrams  for  each 
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optimal  alternating  network  and  each  self-checking  alternating  network.  If 
the  details  are  not  of  interest,  proceeding  to  Chapter  6 is  advised. 


5.2.  Functional  Notation 

In  order  to  define  explicitly  the  manner  in  which  the  data  are 
presented,  it  is  probably  best  to  pick  a three  variable  function  and  find 
its  optimal  conventional  NOR  realization,  its  optimal  alternating  NOR 
realization,  and  the  se lf-checking  alternating  NOR  realization  utilized  for 
representing  that  function.  To  this  end  consider  the  function  fCx^.x^.x^) 
specified  in  Figure  5.1a).  The  function  can  be  represented  as  an  8-tuple 
zq,z1, . . . where  Zj  * 0 or  1,  0 < i < 7,  and  where  zq  ■ f (0,0,0), 
z^  = f (0,0, 1) , . . . , and  z^  ■ f(l,l,l).  That  is,  f can  be  represented  as 
00011100.  As  this  notation  is  somewhat  cumbersome  a shorter  notation 
based  on  the  previous  notation  is  used.  The  8-tuple  zqz^...z^  is  parsed 
into  two  four-tuples,  and  a hexadecimal  notation  based  on  Table  5.1  is  used. 
The  resulting  2-tuple  representation  for  the  function  is  thus  denoted 
fCx^x  ,x^)  - yQy i where  y^eto.l, . . . ,9,A,B, . . . ,f)  for  0 < i < 1.  The  function 
f is  thus  represented  as  ffa^^.x^)  ■ 1C,  since  the  hexadecimal  version  of 
0001  1100  is  1C. 


5.3.  Results 

Once  the  hexadecimal  notation  for  a function  f is  obtained, 


Table  5.2  is  consulted.  The  first  column  of  that  table  lists  the  hexadecimal 
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Table  5.1.  Hexadecimal  Notation 


si+l  zi+2  Zi+3 


0 0 0 0 
0 0 0 1 
0 0 10 
0 0 11 
0 10  0 
0 10  1 
0 110 
0 111 
10  0 0 
10  0 1 
10  10 
10  11 
110  0 
110  1 
1110 
1111 


0 

1 

2 

3 

4 

5 

6 

7 

8 
9 
A 
B 
C 
D 
E 
F 


i -0,4 


j - i/4 


ip  «■: 
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specifications  for  all  256  functions!  of  three  or  fewer  variables.  The 
hexadecimal  specification  for  the  function  in  question  is  thus  used  to 
select  a row  of  the  table.  The  second  column  of  the  table  lists  the  number 
of  gates  required  in  the  conventional  optimal  NOR  realization  of  each 
function  as  given  in  Hellerman  [18].  (Complements  of  input  variables  are 
assumed  to  be  unavailable.)  Thus,  for  the  function  1C,  6 NOR  gates  are 
required.  A — in  the  second  column  indicates  that  the  functional  specifi- 
cation for  that  row  is  a specification  for  a 0,  1,  or  2 variable  function. 

The  third  through  fifth  columns  contains  data  for  the  optimal  alternating 
NOR  network  which  represents  f,  namely  the  optimal  network  for  the  duali- 
zation  of  f,  f*,  discussed  in  Chapter  2.  For  the  function  1C  there  are  8 
gates  in  this  network,  yielding  a cost  ratio  of  8/6  or  1.33.  The  drawing 
numbers  in  the  fourth  column  will  be  discussed  later.  The  sixth  through 
eighth  columns  contain  data  for  an  alternating  network  which  represents 
f by  realizing  f^  but  does  so  with  sufficient  structural  properties  to 
guarantee  that  it  is  a self-checking  alternating  network.  For  1C  this 
realization  has  9 NOR  gates,  yielding  a cost  ratio  of  9/6  or  1.5.  A better 
realization  for  the  self-checking  alternating  network  may  exist  but  at  best 
it  can  have  no  fewer  gates  than  the  optimal  alternating  network,  namely  8. 

The  cost  ratio  1.33  is  thus  a lower  bound  on  the  cost  ratio  for  the  function 
1C. 

The  gates  required  in  the  optimal  alternating  networks  representing 
f were  obtained  by  finding  optimal  NOR  realizations  for  the  function  f*  of 
each  three  variable  function  f.  Optimal  NOR  realizations  for  every  four 
variable  self-dual  function  were  thus  required.  Of  the  3984  P (permutation 
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of  variable)  equivalence  classes  of  four  variables,  assuming  complements 
of  input  variables  are  not  available,  32  are  P equivalence  classes  of  self- 
dual functions.  A representative  of  each  of  these  32  representative  functions 
was  selected  and  optimized  by  first  minimizing  the  gate  count,  then 
minimizing  the  number  of  gate  inputs,  and,  finally,  minimizing  the  number 
of  levels  required  to  realize  the  function,  utilizing  a FORTRAN  program 
ILLOD- (NOR-B) ' written  by  Nakagawa  and  Lai  [25].  (The  optimizing  algorithm 
used  in  that  program  is  based  on  Davidson's  [12]  branch-and -bound  method  and 
is  essentially  a NOR  version  of  Davidson's  optimizing  NAND  decomposition 
algorithm.)  After  these  optimal  networks  were  produced,  one  was  assigned  to 
each  three  variable  function  along  with  a permutation  number  specifying  how 
input  variables  are  connected  such  that  the  network  represents  f by  realizing 
f^.  Network  drawings  of  the  optimal  alternating  networks  appear  in 
Figure  5.2,  p.  82.  For  the  example  function  1C,  networks  22  and  23  are  both 
optimal  alternating  networks  for  the  function  although  neither  is  self- 
checking. Further,  an  input  interconnection  number,  1,  is  specified, 
delimited  by  a slash  (/).  Table  5.3,  p.  80,  associates  this  number  with  an  input 
interconnection  specification.  Thus,  for  permutation  1,  the  clock  $ should 
be  connected  to  a,  x^  to  b,  X£  to  d,  and  x^  to  c.  The  resulting  network 
using  optimal  network  number  22  is  shown  in  Figure  5.1  b).  It  is  the  optimal 
alternating  NOR  network  representing  the  function  1C. 

A self-checking  alternating  network  representing  the  same  function 
can  be  obtained  using  the  network  drawing  information  in  the  seventh  column 
of  Table  5.2,  p.  70.  In  this  column  is  specified  a network  drawing  number  and 
an  input  interconnection  specification  as  before.  The  network  corresponding 
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to  these  numbers  appear  in  Figure  5.3,  p.  84.  For  the  example  function,  IC, 
network  drawing  number  22  is  specified  with  interconnection  number  1.  The 
resulting  self-checking  alternating  network  is  shown  in  Figure  5.1  c). 

The  self -checking  alternating  networks  shown  in  Figure  5.3  were 
also  generated  by  the  FORTRAN  program  'ILLOD- (NOR-B) ' . The  networks, 
however,  were  produced  by  the  program  in  its  search  for  the  optimal 
networks.  The  self-checking  capability  of  these  networks  was  determined 
independently  based  on  their  structural  properties. 
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Table  5.2.  Cost  Ratio  and  Network  Drawing  Table 


Function 

Realization 

Optimal 

Conventional 

Optima  1 
Alternating 

Self-checking 

Alternating 

Gates 

Gates  Drwg. 

Ratio 

Gates 

Drwg.  Ratio 

00 

- 

- 

- 

- 

- 

- 

- 

01 

4 

5 

6/0 

1.25 

5 

6/0 

1.25 

02 

3 

6 

8/0 

2.00 

6 

8/0 

2.00 

03 

- 

- 

- 

- 

- 

- 

- 

04 

3 

6 

8/1 

2.00 

6 

8/1 

2.00 

05 

- 

- 

- 

- 

- 

- 

- 

06 

6 

7 

14/0 

1.17 

7 

14/0 

1.17 

07 

3 

5 

6/6 

1.67 

5 

6/6 

1.67 

08 

2 

6 

9/0 

3.00 

7 

9/0 

3.50 

09 

5 

7 

14/6 

1.40 

7 

14/6 

1.40 

0A 

- 

- 

- 

- 

- 

- 

- 

0B 

4 

6 

8/6 

1.50 

6 

8/6 

1.50 

OC 

- 

- 

- 

- 

- 

- 

0D 

4 

6 

8/7 

1.50 

6 

8/7 

1.50 

0E 

5 

6 

9/6 

1.20 

7 

9/6 

1.40 

OF 

- 

- 

- 

- 

- 

- 

- 

10 

3 

6 

8/4 

2.00 

6 

8/4 

2.00 

11 

- 

- 

- 

- 

- 

- 

- 

12 

6 

7 

14/2 

1.17 

7 

14/2 

1.17 

13 

3 

5 

6/8 

1.67 

5 

6/8 

1.67 

14 

6 

7 

14/3 

1.17 

7 

14/3 

1.17 

15 

3 

5 

6/9 

1.67 

5 

6/9 

1.67 

16 

7 

8 

20/0 

1.14 

9 

20/0 

1.28 

17 

4 

4 

3/18 

1.00 

4 

3/18 

1.00 

18 

6 

8 

21/0 

1.33 

9 

21/0 

1.50 

19 

5 

8 

20/8 

1.80 

9 

20/8 

1.80 

1A 

6 

8 

22.23/0 

1.33 

9 

22/0 

1.50 
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Table  5.2  Continued 


Realization 

Optimal 

Conventional 

Optimal 

Alternating 

Self-Checking 

Alternating 

Function 

Gates 

Gates  Drwg. 

Ratio 

Gates 

Drwg. 

19 

36 

6 

8 

21/8 

1.33 

9 

21/8 

1.50 

37 

3 

6 

8/20 

2.00 

6 

8/20 

2.00 

38 

5 

8 

24/2 

1.60 

9 

23/2 

1.80 

39 

5 

8 

21/14 

1.60 

9 

21/14 

1.80 

3A 

5 

7 

15/8 

1.40 

8 

15/8 

1.60 

3B 

4 

6 

9/14 

1.50 

7 

9/14 

1.75 

3C 

- 

- 

- 

- 

- 

- 

- 

3D 

5 

8 

22,23/18 

1.60 

9 

22/18 

1.80 

3E 

6 

8 

24/12 

1.33 

9 

23/12 

1.50 

3F 

- 

- 

- 

- 

- 

- 

- 

40 

2 

6 

9/3 

3.00 

7 

9/3 

3.50 

41 

5 

7 

12/9 

1.40 

7 

12/9 

1.40 

42 

6 

8 

21/3 

1.33 

9 

21/3 

1.50 

43 

5 

8 

20/9 

1.60 

9 

20/9 

1.80 

44 

- 

- 

- 

- 

- 

- 

- 

45 

4 

6 

8/9 

1.50 

6 

8/9 

1.50 

46 

6 

8 

22,23/3 

1.33 

9 

22/3 

1 .50 

47 

4 

7 

14/15 

1.75 

7 

14/15 

1.75 

48 

5 

7 

15/1 

1.40 

8 

15/1 

1.60 

49 

6 

8 

22,23/13 

1.33 

9 

22/13 

1.50 

4A 

5 

8 

24/1 

1.60 

9 

23/1 

1.80 

4B 

5 

8 

21/13 

1.60 

9 

21/13 

1.80 

4C 

2 

6 

10/1 

3.00 

6 

10/1 

3.00 

4D 

5 

5 

5/20 

1.00 

5 

5/20 

1.00 

4E 

5 

7 

15/7 

1.40 

8 

15/7 

1.60 

4F 

4 

6 

9/13 

1.50 

7 

9/13 

1.75 

I 
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Realization 


r 

Optimal 

Conventional 

Optimal 

Alternating 

Self-Checking 

Alternating 

Function 

Gates 

Gates  Drwg. 

Gates 

Drwg.  Ratio 

50 

- 

- 

- 

-- 

- 

- 

- 

1 51 

4 

6 

8/11 

1.50 

6 

8/11 

1.50 

52 

6 

8 

22,23/5 

1.33 

9 

22/5 

1.50 

53 

4 

7 

14/17 

1.75 

7 

14/17 

1.75 

54 

5 

6 

9/9 

1.20 

7 

9/9 

1.40 

55 

- 

- 

- 

- 

- 

- 

- 

56 

6 

8 

21/9 

1.33 

9 

21/9 

1.50 

i 57 

3 

6 

8/21 

2.00 

6 

8/21 

2.00 

l 58 

5 

8 

24/3 

1.60 

9 

23/3 

1.80 

59 

5 

8 

21/15 

1.60 

9 

21/15 

1.80 

1 5A 

- 

- 

- 

- 

- 

- 

- 

5B 

5 

8 

22,23/19 

1.60 

9 

22/19 

1.80 

1 

5 

7 

15/9 

1.40 

8 

15/9 

1.60 

5D 

4 

6 

9/15 

1.50 

7 

9/15 

1.75 

1 5E 

6 

8 

24/13 

1.33 

9 

23/13 

1.50 

* 5F 

- 

- 

- 

- 

- 

- 

- 

- 60 

5 

7 

15/4 

1.40 

8 

15/4 

1.60 

1 61 

6 

8 

22,23/16 

1.33 

9 

22/16 

1.50 

62 

5 

8 

24/4 

1.60 

9 

23/4 

1.80 

63 

5 

8 

21/16 

1.60 

9 

21/16 

1.80 

64 

5 

8 

24/5 

1.60 

9 

23/5 

1.80 

65 

5 

8 

21/17 

1.60 

9 

21/17 

1.80 

66 

- 

- 

- 

- 

- 

- 

67 

5 

8 

22,23/22 

1.60 

9 

22/22 

1.80 

68 

6 

8 

29,30/0 

1.33 

9 

28/0 

1.50 

1 

7 

7 

13/18 

1.00 

8 

13/18 

1.14 

I 

I 
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Realization  ^ 

Optimal 

Conventional 

Optimal 

Alternating 

Self-Checking 

Alternating 

Function 

Gates 

Gates  Drwg. 

Ratio 

Gates 

Drwg.  Ratio 

6A 

5 

8 

31/0 

1.60 

10 

29/0 

2.00 

6B 

6 

8 

24/18 

1.33 

9 

23/18 

1.50 

6C 

5 

8 

31/1 

1.60 

10 

29/1 

2.00 

6D 

6 

8 

24/19 

1.33 

9 

23/19 

1.50 

6E 

5 

8 

29,30/6 

1.60 

9 

28/6 

1.80 

6F 

5 

7 

15/18 

1.40 

8 

15/18 

1.60 

70 

2 

6 

10/4 

3.00 

6 

10/4 

3.00 

71 

5 

5 

5/18 

1.00 

5 

5/18 

1.00 

72 

5 

7 

15/10 

1.40 

8 

15/10 

1.60 

73 

4 

6 

9/18 

1.50 

7 

9/18 

1.75 

74 

5 

7 

15/11 

1.40 

8 

15/11 

1.60 

75 

4 

6 

9/17 

1.50 

7 

9/17 

1.75 

76 

6 

8 

24/16 

1.33 

9 

23/16 

1.50 

77 

- 

- 

- 

- 

- 

- 

- 

78 

5 

8 

31/4 

1.60 

10 

29/4 

2.00 

79 

6 

8 

24/22 

1.33 

9 

23/22 

1.50 

7A 

5 

8 

29,30/8 

1.60 

9 

28/8 

1.80 

7b 

5 

7 

15/20 

1.40 

8 

15/20 

1.60 

7C 

5 

8 

29,30/9 

1.60 

9 

28/9 

1.80 

7D 

5 

7 

15/21 

1.40 

8 

15/21 

1.60 

7E 

6 

8 

31/18 

1.33 

10 

29/18 

1.67 

7F 

2 

6 

10/18 

3.00 

6 

10/18 

3.00 

80 

1 

7 

16/0 

7.00 

7 

16/0 

7.00 

81 

5 

8 

25/0 

1.60 

11 

24/0 

2.20 

82 

4 

7 

17/0 

1.75 

9 

17/0 

2.25 

83 

4 

8 

32/0 

2.00 

10 

30/0 

2.50 

84 

4 

7 

17/1 

1.75 

9 

17/1 

2.25 

Optimal 

Alternating 


Self-Checking 

Alternating 


£ 

85 

1 

86 

87 

1. 

88 

89 

I 

8A 

l 

8B 

«rv 

1 

8C 

1 

8D 

8E 

| 

8F 

90 

1 

91 

1 

92 

1 

93 

1 

94 

95 

1 

96 

97 

| 

98 

■L 

99 

( 

9A 

1 

9B 

1 

9C 

1 

9D 

1 

9E 

I 

1 

« 

1 

9F 

_ 1 . 
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Realization 

Optimal 

Conventional 

Optimal 

Alternating 

Self-Checking 

Alternating 

Function 

Gates 

Gates  Drwg. 

Ratio 

Gates 

Drwg.  Ratio 

AO 

- 

- 

- 

- 

- 

- 

- 

A1 

5 

8 

33/8 

1.60 

10 

31/8 

2.00 

A2 

3 

7 

18/2 

2.33 

8 

18/2 

2.67 

A3 

4 

7 

17/8 

1.75 

9 

17/8 

2.25 

A4 

6 

8 

34,35/2 

1.33 

10 

32/2 

1.67 

A5 

- 

- 

- 

- 

- 

- 

- 

A6 

6 

8 

26/2 

1.33 

10 

25/2 

1.67 

A7 

4 

8 

33/14 

2.00 

10 

31/14 

2.50 

A8 

4 

7 

19/0 

1.75 

7 

19/0 

1.75 

A9 

6 

8 

26/12 

1.33 

10 

25/12 

1.67 

AA 

- 

- 

- 

- 

- 

- 

- 

AB 

4 

7 

18/12 

1.75 

8 

18/12 

2.00 

AC 

5 

8 

27/0 

1.60 

9 

26/0 

1.80 

AD 

5 

8 

34,35/12 

1.60 

10 

32/12 

2.00 

AE 

5 

7 

19/6 

1.40 

7 

19/6 

1.40 

AF 

- 

- 

- 

- 

- 

- 

- 

BO 

3 

7 

18/4 

2.33 

8 

18/4 

2.67 

Bl 

4 

7 

17/10 

1.75 

9 

17/10 

2.25 

B2 

6 

6 

7/19 

1.00 

6 

7/19 

1.00 

B3 

3 

7 

16/8 

2.33 

7 

16/8 

2.33 

BA 

6 

8 

26/4 

1.33 

10 

25/4 

1.67 

B5 

4 

8 

33/16 

2.00 

10 

31/16 

2.50 

B6 

7 

8 

34,35/8 

1.14 

10 

32/8 

1.42 

B7 

4 

7 

17/20 

1.75 

9 

17/20 

2.25 

B8 

5 

8 

27/2 

1.60 

9 

26/2 

1.80 

B9 

5 

8 

34,35/14 

1.60 

10 

32/14 

2.00 

MMM 


w; 


Table  5.2  Continued 


Function 


Realization 


Optimal 

Conventional 

Gates 

5 

6 

5 

6 
3 

5 

3 


6 

4 

4 
6 

5 
5 

4 

5 

3 

4 

6 
4 
6 


Optimal 

Alternating 


Gates  Drwg.  Ratio 


7 

19/8 

1.40 

8 

28/0 

1.33 

8 

26/18 

1.60 

8 

27/12 

1.33 

7 

18/18 

2.33 

8 33/9  1.60 


8 

34,35/3 

2.67 

7 

18/3 

2.33 

7 

17/9 

1.75 

8 

26/3 

1.33 

8 

33/15 

2.00 

7 

19/1 

1.75 

8 

26/13 

1.33 

8 

27/1 

1.60 

8 

34,35/13 

1.60 

7 18/13  1.75 


7 

19/27 

1.40 

7 

18/5 

2.33 

7 

17/11 

1.75 

8 

26/5 

1.33 

8 

33/17 

2.00 

6 

7/18 

1.00 

Self -Checking 
Alternating 


Gates 

Drwg. 

Ratio 

7 

19/8 

1.40 

11 

27/0 

1.83 

10 

25/18 

2.00 

9 

26/12 

1.50 

8 

18/18 

2.67 

10  31/9  2.00 


10 

32/3 

3.33 

8 

18/3 

2.67 

9 

17/9 

2.25 

10 

25/3 

1.67 

31/15 

2.50 

7 

19/1 

1.75 

10 

25/13 

1.67 

9 

26/1 

1.80 

10 

32/13 

2.00 

8 

18/13 

2.00 

7 

19/27 

1.40 

8 

18/5 

2.67 

9 

17/11 

2.25 

10 

25/5 

1.67 

10 

31/17 

2.50 

6 

7/18 

1.00 

78 


Table  5.2  Continued 


Realization 

Optimal 

Optimal 

Self-Checking 

Conventional 

Alternating 

Alternating 

Function 

Gates 

Gates  Drwg. 

Ratio 

Gates 

Drwg. 

Ratio 

D5 

5 

7 

16/9 

1.40 

7 

16/9 

1.40 

D6 

7 

8 

34,35/9 

1.14 

10 

32/9 

1.42 

D7 

4 

7 

17/21 

1.75 

9 

17/21 

2.25 

D8 

5 

8 

27/13 

1.60 

9 

26/13 

1.80 

D9 

5 

8 

34,35/15 

1.60 

10 

32/15 

2.00 

DA 

6 

8 

28/1 

1.33 

11 

27/1 

1.83 

DB 

5 

8 

26/19 

1.60 

10 

25/19 

2.00 

DC 

5 

7 

19/9 

1.40 

7 

19/9 

1.40 

DD 

- 

- 

- 

- 

- 

- 

- 

DE 

6 

8 

27/13 

1.33 

9 

26/13 

1.80 

DF 

3 

7 

18/19 

2.33 

8 

18/19 

2.67 

EO 

4 

7 

19/4 

1.75 

7 

19/4 

1.75 

El 

6 

8 

26/16 

1.33 

10 

25/16 

1.67 

E2 

5 

8 

27/4 

1.60 

9 

26/4 

1.80 

E3 

5 

8 

34,35/16 

1.60 

10 

32/16 

2.00 

E4 

5 

8 

27/5 

1.60 

9 

26/5 

1.80 

E5 

5 

8 

34,35/17 

1.60 

10 

32/17 

2.00 

E6 

6 

8 

28/4 

1.33 

11 

27/4 

1.83 

E7 

5 

8 

26/21 

1.60 

10 

25/21 

2.00 

E8 

5 

5 

4/18 

1.00 

5 

4/18 

1.00 

E9 

7 

8 

28/18 

1.14 

11 

27/18 

1.57 

EA 

4 

6 

11/0 

1.50 

6 

11/0 

1.50 

EB 

5 

8 

27/18 

1.60 

9 

26/18 

1.80 

EC 

4 

6 

11/1 

1.50 

6 

11/1 

1.50 

ED 

5 

8 

27/19 

1.60 

9 

26/19 

1.80 

EE 

- 

- 

- 

- 

- 

- 

EF 

4 

7 

19/18 

1.75 

7 

19/18 

1.75 
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Table  5.2  Concluded 


Realization 

Optimal 

Optimal 

Self-Checking 

Conventional 

Alternating 

Alternating 

Function 

Gates 

Gates  Drwg. 

Ratio 

Gates 

■asm 

Ratio 

FO 

- 

- 

- 

- 

- 

- 

- 

FI 

4 

7 

18/16 

1.75 

8 

18/16 

2.00 

F2 

5 

7 

19/10 

1.40 

7 

19/10 

1.40 

F3 

- 

- 

- 

- 

- 

- 

- 

F4 

5 

7 

19/11 

1.40 

7 

19/11 

1.40 

F5 

- 

- 

- 

- 

- 

- 

- 

F6 

6 

8 

27/16 

1.33 

9 

26/16 

1.80 

F7 

3 

7 

18/22 

2.33 

8 

18/22 

2.67 

F8 

4 

6 

11/4 

1.50 

6 

11/4 

1.50 

F9 

5 

8 

27/22 

1.60 

9 

26/22 

1.80 

FA 

- 

- 

- 

- 

- 

- 

- 

FB 

4 

7 

19/20 

1.75 

7 

19/20 

1.75 

FC 

- 

- 

- 

- 

- 

- 

- 

FD 

4 

7 

19/21 

1.75 

7 

19/21 

1.75 

FE 

5 

6 

11/18 

1.20 

6 

11/18 

1.20 

FF 

- 

- 

- 

- 

- 

- 

- 

80 


Table  5.3.  Input  Interconnection  Specification 


Permutation 

Number 

0 

1 

2 

3 

4 

5 

6 

7 

8 
9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 
21 
22 
23 


Variables 
$ x^  x2  x3 

abed 
a b d c 
a c b d 
a c d b 
a d b c 
a d c b 
b a c d 
bade 
c a b d 
b c d a 
b d a c 
b d c a 
bead 
c a d b 
c b a d 
c b d a 
c d a b 
c d b a 
d a b c 
d a c b 
d b a c 
d b c a 
d c a b 
d c b a 
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6.  ALTERNATING  DESIGN  WITH  NAND/NOR  LOGIC 


6.1.  NAND/NOR  Algebra 

The  two-input  NAND  function  and  the  two-input  NOR  function  are 
commonly  denoted  by  such  symbols  as  the  stroke 

a|b*»aF*a+b  (NAND) 


and  the  arrow 


aib  - a + b - a b (NOR) . 


While  such  a notation  is  convenient  for  two  input  functions,  its  implementa- 
tion in  a NAND/NOR  decomposition  of  a multi-input  function  becomes  awkward 
to  read  and  to  manipulate,  and  an  alternate  notation  becomes  desirable. 

Hohn  [ 19]  har;  proposed  such  a notation  and  developed  an  algebra  for  mani- 
pulating a function  expressed  in  that  notation. 

Let  M denote  the  multi-input  NAND  function  and  m denote  the  multi- 
input NOR  function.  Then  for  all  switching  functions  f^,f2, . . . ,f^  of  n 
variables,  and  for  all  possible  integers  k, 

M(f1,f2,...,fk)  - f^TTT^  - f1+?2  + ...  + f k 

and  

m(f^,f2,...,fk)  * fj+f2  + •••  + m 

Thus,  M(f f2 , . . . , f^)  denotes  the  NAND  of  f^,f2>...,  and  f^  and 
m(f^ , f2 , . . . , f^)  denotes  the  NOR  of  f ^ , f2 , . . . , and  f^.  When  this  notation  is 
applied  to  the  familiar  sum-of-products  to  NAND  transformation,  the  following 
results  where  g^  gt2  ...  gir  represents  the  i-th  implicant  of  r ^ variables. 


■*r- 
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811812*  ’ ‘8lr1+®21822‘ "82r2  +‘"  + ^1^2 * * ,gkrk 

* 

■ M[M(g^,g^2 8^r  ) »M(g2 ^ i g22 » * * * * ) » • • • ’ ^2  * ’ * * ’ ®kr  ^ 

12  k 


Similarly  the  product -of -sums  to  NOR  transformation  can  be  written  as  follows 
where  h.^^-41^2 +•••  +hir  represents  the  i-th  implicate  of  r^  variables. 


(hll‘Hl12  + *‘*  +hlr1)(h2l‘H,22  + ’“  +h2r2^  * * * ^1^1*2  + " ’ + kkrk^ 

■ m[m(h^^,h^2, . . . »h^r  ) »®(h2^,h22> . . . ,h2^  ) » • • • »m(b^^*h^2> . . . ,hj^^  )1  ■ 

12  k 


Utilization  of  these  transformations  enable  NAND  and  NOR  expressions 
to  be  obtained  directly  from  the  Karnaugh  map  specification  of  a function. 
Further,  the  NAND  and  NOR  representations  obtained  are  necessarily  minimal 
two-level  representations  of  f.  The  following  example  illustrates  the 
procedure. 


Example  6.1:  Consider  a function  f of  four  variables  x^x  »x3,  and  x^ 

specified  as  in  Figure  6.1  a).  A minimal  two-level  NOR  decomposition  of  f 
is  obtained  by  first  circling  prime  implicates  as  shown.  Then  the  NOR 
decomposition  is  written  as, 

f - m[m(x1,x2),m(x1,x3),m(x2,x3,x4)] . 

This  representation  is  really  obtained  from  the  product-of-sums  represen- 
tation, 

f - (x14x2)(x1-ric3)(x2-fx3-+x4) 

but  can  be  written  from  the  map  directly. 

Similarly,  the  minimal  two-level  NAND  decomposition  of  f is 
obtained  from  the  prime  lmplicant  map  of  f.  Figure  6.1  b),  as 
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f m mCm(x3 ,x2 ) ,M(x^ ,x3)  ,x^  ) ,M(x2  »x3 ) ] , 

with  the  sum-of-products  form  being 

f “ + *1^3  + + *2^3 ' 

Once  the  two- level  NAND  or  NOR  decompositions  of  a function  f are 
obtained,  it  should  be  possible  to  effect  transformations  on  these  so  as  to 
produce  possibly  more  optimal  multi-level  realizations.  Hohn  [19]  has 
developed  a NAND/NOR  algebra  to  handle  such  transformations.  The  laws  of  the 
algebra  are  summarized  here. 

The  NAND  and  NOR  operations  are  operations  obeying  the  commutative 
law.  Thus,  if  i^,^,...,!^  Is  any  permutation  of  l,2,...,k  then 

M(f^,f2»  • • • »f^)  * ) 

1 2 K 

,f.  i • • . |f  ^ 

1 *2 

The  operations  are  however  not  associative;  that  is, 

i M[M(f1,f2),f3] 

m[f1,m(f2,f3)]  + m[m(f1,f2),f3] . 

When  more  than  one  operation  is  involved,  certain  regroupings  are  possible. 
These  result  in  the  hybrid  associative  laws. 

M(f i» fj * • • • » ^ 

®(f  i > ^2 * • • • » ^ * h*)  ■ ®[M(f^, f2 » • • • * f^) »h*l 

These  laws  turn  out  to  be  useful  for  utilizing  available  Inputs,  for 
eliminating  complements  when  desirable,  and  for  controlling  fan-in  and 
fan-out. 


m(f ^ , f 2 * • • • » ^)  m 
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The  NAND  and  NOR  operations  are  not  distributive.  That  is, 

M(f1,m(f2,f3))  + m(M(f1,f2),M(f1,f3)) 

m(f1,M(f2,f3))  + M(m(f1,f2),m(f1,f3)). 

However,  the  factoring  laws  play  the  role  played  by  the  distributive  laws 

in  the  factoring  process.  Let  f*,  g*,  and  h*  denote  any  nonnegative 

integral  number  of  arguments  f^,  g^,  h^,  respectively.  Similarly,  let  f+, 

g+,  and  h*  denote  any  positive  integral  number  of  arguments  f^,  g^,  h^, 

respectively.  Thus,  h may  be  an  empty  set,  but  h cannot.  Moreover, 

whenever  h*  or  h+  is  repeated  in  a given  identity,  it  stands  for  the  same 

. 4-  ^ 

set  of  arguments  at  each  appearance.  The  same  applies  for  f*,  f , g , and 
g+.  Utilizing  this  notation,  the  generalized  laws  of  factorization  are 

M(f+,g|),M(f+,g2),...,M(f+,g^),h*] 

- M[M(f+,M{M(g^) ,M(g2 ) , . . . ,M(g£)} ) ,h*] 

m[  m ( f +,  g+) , m ( f +,  g*) m ( f +,  g£) , h*] 

- m[m(f+,m{m(g+)  ,m(g^), . . . ,m(g£)}  ) ,h*]  . 

The  laws  of  idempotency  for  NAND  and  NOR  are  essentially  derived  from  those 
for  AND  and  OR. 

M(f,f,g*)  - M(f,g*) 


From  the  basic  definitions  of  the  NAND  and  NOR  operations,  the  laws  of 
operation  with  0 and  1. 
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M(0,g*)  - 1 and  M(l,f+)  - M(f+) 
m(l,g*)  ■ 0 m(0,f+)  - m(f+), 

and  the  laws  of  complementarity. 

M(f,f,g*)  - 1 
m(f,T,g*)  - 0 

result.  The  laws  of  Involution  take  the  form 

M(M(f ))  - f and  m(M(f))  - f 

m(m(£))  - f M(m(f))  - f. 

Other  transformations  or  laws  which  are  for  the  most  part  simply 
translations  of  AND/OR/NOT  transformations  to  NAND/NOR  form  also  are 
useful.  These  are  the  reduction  laws 

M(f,m(f,g))  - 1 
m(f,M(f,g))  - 0, 

the  generalized  laws  of  redundancy, 

M[f,M(f,g+),h*]  - M[f,M(g+),h*]  M[f,m(7,g+),h*]  - M[ f ,m(g+) ,h*] 

m[f ,m(f ,g+),h*]  - m[f,m(g+),h*]  m[f ,M(f,g+),h*]  - m[ f ,M(g+) ,h*] 

the  generalized  absorption  laws, 

MtM(f+),M(f+,g*),h*]  - M[M(f+),h*] 
m[m(f+),m(f+,g*),h*]  - m[m(f+),h*], 

the  laws  of  consensus. 


- rV 


i 
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M[M(f,g),M(f,h),M(g,h)]  - M[M(f,g),M(I,h)] 
m[m(f  ,g)  ,m(f  ,h)  ,m(g,h)]  ■ m[m(f  ,g)  ,m(f  ,h)]  , 

the  generalized  laws  of  condensation, 

M[M(f,g+),M(f,g+),h*]  - M[M(g+),h*] 

m[m(f,g+),m(f,g+),h*]  - m[m(g+),h*], 

and  a somewhat  useful  transformation,  identity  II, 

M[M{M(f1,f2),M(fl,f2)},h*]  - M[M(f1,f2),M(I1,f2),h*] 

m[mU(f1,f2),m(f1,f2)]  ,h*]  - m[m(f1,?2)  ,h*L 

As  an  illustration  of  the  application  of  NAND/NOR  algebra  consider 
the  full  adder,  Hohn  [19]. 

Example  6.2:  The  full  adder  model  and  Karnaugh  maps  specifying  its  operation 

are  shown  in  Figure  6.2  a).  From  the  map  for  S,  a two-level  NAND  repre- 
sentation is  obtained, 

S - M[M(a,b,c1),M(a,b,c1),M(a,b,c1),M(a,b,c1)]. 

Using  the  laws  of  commutativity  and  the  laws  of  factorization, 

S - M[M(a,b,c1),M(a,b,c1),M(M{M(a,b),M(a,b)],c1)]. 

But  then,  using  identity  11, 

S - M[M(a,b,c1),M(a,b,c1),MlM(a,b),M(a,b),c1}]. 

Now,  using  the  laws  of  redundancy  to  remove  complements 

S - M[M{a,M(b),M(c1)},M[M(a),b,M(c1)}, 

M{M{a,M(b)}  ,M{M(a),b}  .Cj}] 
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■>  S - M[M(a,M(a,b),M(a,c1)},MU(a,b),b,M(b,c1)], 
MlMU,M(a,b)}  ,M(M(a,b),b)  ,^3] . 

Once  afeain,  using  the  laws  of  redundancy,  the  redundant  argument 
M (a , b ) can  be  inserted  into  both  M(a,ci)  and  MCb.c^)  within  the  first  two 
major  arguments,  and  the  redundant  argument  c^  can  be  inserted  into 
M;a,M(a,b)3  and  MlM(a,b),b]  of  the  last  major  argument.  Thus, 

S - M[M{a,M(a,b),M[a,M(a,b),ct]),M{M(a,b),b,M[M(a,b),b,c1]}, 
M{M[a,M(a,b),ci],K[M(a,b),b,ci],ci3]. 

Although  the  result  looks  complex,  repeated  appearances  of  the  same 
argument  make  it  an  economical  expression  for  S. 

From  the  map  for  Cq, 

CQ  - M[M(a,b),M(b,c1),M(a,ci)]. 

And,  using  the  laws  of  redundancy, 

Cq  - M[M(a,b),M{M(a,b),b,c13,M{a,M(a,b),c13]. 

The  resulting  form  thus  has  the  same  arguments  as  appear  in  S resulting  in 
the  circuit  shown  in  Figure  6.2  b). 


6.2.  Self-Checking  NAND/NOR  Algebra 

The  NAND/NOR  algebra  presented  permits  manipulations  of  NAND/NOR 
decompositions  of  Boolean  functions.  Such  decompositions  are  important 
since  any  Boolean  function  can  be  expressed  as  such  a decomposition  and, 
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therefore,  realized  In  a NAND/NOR  network.  However,  of  interest  here  is 
the  realization  of  a function  f in  an  alternating  NAND/NOR  network.  If  f 
is  self-dual,  then  f can  be  expressed  as  a NAND/NOR  decomposition  and 
realized  in  a NAND/NOR  network  directly.  If  f is  not  self-dual,  then  it 
is  dualized  to  form  the  self-dual  function  f*,  and  f*  is  expressed  as  a 
NAND/NOR  decomposition  and  realized  in  a NAND/NOR  network  with  the  (0,1) 
clock  $ as  one  input.  In  either  case  the  resulting  NAND/NOR  network  is 
an  alternating  network.  It  is,  however,  not  necessarily  a self-checking 
network.  To  be  self-checking  the  NAND/NOR  network  structure  must  be 
restricted  to  some  degree.  That  restriction  is  essentially  specified  in 
Corollary  2.1.  However,  a restatement  of  that  corollary  directly  as  it 
pertains  to  alternating  NAND/NOR  networks  requires  some  development. 

Jonsider  an  arbitrary  alternating  NAND/NOR  network  and  label 
that  network  as  follows.  Label  the  output  gate  6,  standing  for  odd. 

Label  each  gate  which  is  an  input  to  the  o gate  with  an  e,  standing  for 
even.  Now,  proceed  toward  the  input,  labeling  each  gate  which  is  an  input 
to  an  e gate  with  an  o,  and  each  gate  which  is  an  input  to  an  o gate  with 
an  e.  If  such  a labeling  is  possible  then  any  output  path  P from  a fanout 
gate  labeled  o is  such  that  w(P)  ■ 0,  and  any  output  path  P*  from  a fanout 
gate  labeled  e is  such  that  w(P')  “ 1.  Such  a network  is  therefore  self- 
checking according  to  Corollary  2.1.  If  a contradiction  results  from  the 
attempted  labeling,  then  there  is  a fanout  gate  which  is  an  input  to  both 
an  odd  level  gate  and  an  even  level  gate,  and,  as  a result  there  is  an 
output  path  P through  the  even  level  gate  such  that  w(P)  ■ 0,  and  an  output 
path  P'  through  the  odd  level  gate  such  that  w(P')  ■ 1.  As  an  example, 
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consider  the  NAND/NOR  network  shown  in  Figure  6.3.  The  output  gate  is 
first  labeled  o and  then  labeling  proceeds  toward  the  input  according  to 
the  procedure.  For  the  network  shown  in  a),  the  procedure  leads  to  a 
contradiction i That  network  is  therefore  not  self-checking.  For  the 
network  shown  in  b),  no  contradiction  is  encountered,  and  the  network  is 
self-checking. 

A design  procedure  which  assures  the  production  of  NAND/NOR 
alternating  networks  in  which  fanout  gates  feed  only  odd  or  only  even  level 
gates  is  therefore  desirable.  One  such  procedure  that  utilizes  Hohn's 
NAND/NOR  algebra  modified  to  carry  level  information  meets  these  restrictions. 
The  procedure  starts  with  a two-level  NAND/NOR  decomposition  of  the  self- 
dual function  w to  be  realized.  (Note  that  w*f  if  f is  self-dual,  w ■ f 
if  not.)  This  decomposition  is  then  subscripted  to  reflect  level  information. 
Then,  the  subscripted  decomposition  is  transformed  utilizing  laws  from  the 
modified  NAND/NOR  algebra  in  an  effort  to  obtain  a more  optimal  multi-level 
realization.  The  decomposition  obtained  at  each  step  specifies  a NAND/NOR 
alternating  network  meeting  the  stated  restrictions.  To  illustrate  the 
first  part  of  the  procedure  consider  the  function  f of  Example  6.1.  From 
the  map  specification  of  f,  Figure  6.1  a),  the  NOR  decomposition, 

f - m[m(x1,x2),m(x1,x3),m(x2,x3,x4)], 

is  obtained.  When  this  decomposition  for  f is  subscripted  to  reflect  level 
information,  the  subscripted  decomposition, 

f - mo[me(x1,x2),me^'i,x3),me(x2,x3,xA)], 
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results.  An  mQ  (me)  in  this  functional  description  translates  to  an  odd 
(even)  level  NOR  gate  in  the  NAND/NOR  network  realizing  f.  Similarly, 

(Me)  translates  into  an  odd  (even)  level  NAND  gate. 

Each  law  in  Hohn's  NAND/NOR  algebra  is  modified  in  a similar 
fashion  so  as  to  carry  level  information.  For  example  the  hybrid  associative 
laws  become 

M0  (fi*  f2 » * * • » fk,h*)  " M0trae(f1»f2»,'*’\)*h*^ 

m0(f1,f2 fk,h*)  * m0^Me (f i* ^2 

if  the  law  is  applied  to  an  odd  level  gate  and 

Me^fl’f2’ ' ‘ ’ ,fk’h*)  " ^0(fiJ2,....V^ 

fk»h*)  " me^Mo^l,^2,‘",\^,h*-' 

if  applied  to  an  even  level  gate.  A simplification  of  notation  results  if 
L is  defined  as  an  element  of  the  set  {o,e},  Le[o,e)  where  o and  e are 
related  as  follows:  o ■ e , e “ o . The  hybrid  associative  laws  can  then  be 

written  as, 

) m 9 ^2 9 " " 0 9 ^ 

In  similar  fashion  the  other  laws  or  transformations  are  modified  to  form  a 
modified  NAND/NOR  algebra  carrying  level  information.  The  commutative  laws 
become,  where  1^,1^, . . . ,i^  is  any  permutation  of  1,2 k, 

■l/fl*£2 fk)  " mL(fi1»fi2»**',fik)* 


r 
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The  laws  of  factorization  become 

%).  • • • .Mj-(f+,g^),h*] 

- MLCMr(f+,Mt{Mc(gj  ) ,Mj.(t£)  , • • • ,Mj-(g^)}  ) ,h*] 

n^t  m_(  f +,  g^) , mj-(  f+,  ) m_( f+, g£) , h*] 

- mL[n^-(f+,mL{m_(g|)  ,m-(g^)  t • • • ) .h*l . 

The  laws  of  idempotency  become 

H^f.f.g*)  - M^f.g*) 

■ ^(f.g*). 

The  laws  of  operation  with  0 and  1 become 

MjO.g*)  - 1 ^<l,f+)  - l^(f+) 

mL(l,g*)  - 0 rn^O, f+)  - ■L(f+). 

The  laws  of  complementarity  become 

M^f.T.g*)  - 1 
- 0. 

The  laws  of  Involution  become 

M^Mj-Cf))  - f m^Mj-Cf))  - f 

m^m-Cf))  - f ^(--(f))  - f. 

The  reduction  laws  become 

M^f.n^f.g))  - 1 
^(f.^f.g))  - 0. 
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The  laws  of  redundancy  become 

MLCf,M-(f,g+),h*]  - ML[f,tn_(f,g+),h*] -ML[f,m_(g+),h*] 

f , m_( f , gT) , h*]  - n^Cf.m-Cg+j.h*]  f ,g+) ,h*]  - n^E f ,M_(g+) ,h*] . 

The  absorption  laws  become 

MjM^f+j.M^f+.g*)^*]  - ML[M_Cf+) ,h*l 
mL[m-(f+),m_(f+,g*),h*]  - mL[m^(f+)  ,h*]  . 

The  laws  of  consensus  become 

MLEMI-(f,8),MI:(7,h),Mi:Cg,h)]  - M^Mj-Cf.g) ,1^(7, h)] 

»g),nu.(f  ,h),m_(g,h)]  - raJim-Cf  ,g)  ,m_d»h)3  • 

The  laws  of  condensation  become 

ML[Mr(f,g+),Mi;(f,g+),h*]  - MjEM-Cg^.h*] 

m 7[m_(f ,g+),m_(f,g+),h*]  - hl Em_(g+) ,h*] 

L l L **  L 

and,  identity  II  becomes 

mL[m_lmL(f1,f2),mL(T1,T2)}  ,h*]  ■ mL[m_(f1>f2) .m-dj , f2> ,h*]  . 

The  object  of  applying  the  modified  NAND/NOR  algebra  to  the  two- 
level  subscripted  NAN u or  NOR  decomposition  is  to  produce  a multi-level 
decomposition  containing  common  terms  so  as  to  economize  the  implementation. 

The  full  adder  of  Example  6.2  illustrated  this  approach  for  the  unsubscripted 
NAND/NOK  algebra.  However,  when  the  subscripted  algebra  is  used  two  terms 
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are  not  considered  common  unless  they  agree  in  subscripts  as  well  as  in  type. 

For  example  suppose  the  subscripted  algebra  is  applied  to  a two-level 
decomposition  of  a function  f,  and  that  the  following  multi-level  decomposi- 
tion is  obtained, 

f - Mo[Me(a,b),Me(a,c),Me(b,c),Me{Mo(a,b),mo(a,b,c)}]. 

The  subscripted  terms  M (a,b)  and  M (a,b)  appear,  but  they  are  not  considered 

e o 

to  be  common  terms,  and  the  NAND/NOR  realization  of  f would  contain  a NAND 
gate  for  both  Me(a,b)  and  MQ(a,b).  A form  of  redundancy  is  thus  introduced 
automatically  as  required  to  guarantee  that  no  NAND  or  NOR  gate  fans  out 
to  both  even  and  odd  level  gates.  The  following  example  is  one  which 
results  in  this  type  of  redundancy. 

Example  6.3:  Consider  a self-dual  function  f specified  as  in  Figure  6.4  a) 

by  means  of  a Karnaugh  map.  Utilizing  the  prime  implicates  indicated,  a 
two-level  NOR  decomposition  can  be  written, 

f - m[m(x1,x2,x3),m(x1,x2,x3),m(x1,x2,x3),m(x1,x2,x3)]. 

and  subscripted  as, 

f - motme(x1,x2,x3),me(xl,x2,x3),me(x1,x2,x3),me(x1,x2,x3)]. 

Then,  using  the  factorization  law,  the  expression, 

f ■ m0-me^x2  ,x3^  »x3) )}  (xj  »x2  ^x3 ^ ^ ,me  ^x2 ,x3 ,mo * 

is  obtained.  Using  identity  11  on  the  first  major  term  and  the  law  of 
redundancy  on  the  last  two  major  terms  yields, 

f ■ m^f  x 2 (x^ ,x3 ) ,mQ (x^ , x^ ) } » x2  »x3 ) ^ ^ x2 ,x3f  ^xl* x3 ^ ^ ’ 


Figure  6.4.  Function  specification  and  network  for  Example  6.3 
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Eliminating  complements  using  the  law  of  redundancy  then  yields 
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f “ m0-me^m0<X2),mo(xrme(xl,X3^,mo(x3,me(xl,X3^^  • 

me^Xl,X2,mo<Xl,X3^  •me^x2,x3,mo^xrx3^^' 

Based  on  this  multi-level  decomposition,  a NOR  network  containing  an  even 

level  gate  for  m (x, ,x.)  and  an  odd  level  gate  for  m (x. ,x.)  is  constructed, 
e i j o 1 j 

This  network  is  shown  in  Figure  6.4  b). 

The  procedure  described  can  be  applied  to  functions  which  are  not 
self-dual  also.  The  result  is,  of  course,  not  an  alternating  network,  but 
simply  a NAND/NOR  network  having  the  property  that  no  NAND  or  NOR  gate  feeds 
both  even  and  odd  level  gates.  The  following  example  illustrates. 

Example  6.4:  The  function  f has  a Karnaugh  map  specification  shown  in 

Figure  6.5  a).  From  that  specification  the  two-level  NAND  decomposition, 

f - M[M(c,I,b),M(c,a,b)], 

can  be  written  utilizing  the  prime  implicants  shown.  Subscripted,  the 
decomposition  becomes 

f - Mo[Me(c,a,F),Me(c,a,b)] 

°r’  f - Mo[Me(c,Mo(b),Mo(a)),Me(Mo(c),a,b)]. 

Repeated  use  of  the  law  of  redundancy  then  results  in  the  following  sequence 
of  transformations, 
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f ■ MotMe{c,Mo(b,Me(a)),Mo(a)}  ,Me(a,b,Mo(a,c)}], 

- Mo[MeU,Mo(b,Me(a)),Mo(a,c)},Mela,b,Mo(a,c)}] 

■ Mo[Me[c,Mo(b,Me(a,c),Me(a)),Mo(a,c)},Me{a,b,Mo(a,c)}] 

- Mo[Me(c,Mo(b,Me(a,c),Me(a,Mo(a,c))),Mo(a,c)},  MeU,b,Mo(a,c)}] 

- Mo[Me{c,Mo(b,Me(a,b,Mo(a,c))),Mo(a,c)] ,MeU,b,Mo(a,c)}]. 

The  resulting  NAND  network,  shown  in  Figure  6.5  b),  has  no  gate  which  feeds 
both  even  and  odd  level  gates. 
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7.  COMPLETE  SETS  OF  ALTERNATING  LOGIC  PRIMITIVES 

7.1.  Weak  Complete  Alternating  Primitive  Sets 

Consider  a combinational  network  N realizing  an  arbitrary  function 
f with  n inputs  x^,X2j...,xn  and  one  output  y.  The  methods  described 
previously  for  realizing  N as  an  alternating  circuit  utilized  a dualization 
procedure  for  functions  f which  were  not  self-dual  so  as  to  produce  a self- 
dual functional  specification  representing  the  original  functional 
specification.  Such  a dualization  utilized  a system  clock  as  an  input 
in  such  a manner  that  with  the  clock  at  logical  'O'  and  x^x^.-.-jX^ 
applied  as  inputs,  f (x^ ,x„ , . . . .x^)  was  produced.  With  the  clock  at 
logical  '1'  and  x^ , x0 , . . . ,xn  applied  as  input,  f (x^ ,x^ , . . . «xn)  was  produced. 
For  a function  f which  was  already  self-dual,  the  functional  specification 
representing  f was  the  functional  specification  for  f itself,  and  no  clock 
input  was  required.  Once  these  representative  functional  specifications 
were  determined,  they  were  realized  using  conventional  logic  primitives, 
e.g.  AND/OR/NOT,  NAND,  or  NOR,  in  networks  designed  to  be  self -checking 
for  all  single  faults.  In  each  case,  design  procedures  using  the  conven- 
tional sets  of  logic  primitives  led  to  networks  of  restricted  structure. 

Nov.-,  consider  a set  F of  self-dual  functions  F ■ {f^,f^,..., 
f^}  and  suppose  that  this  set  of  logic  primitives  is  to  be  used  to 
realize  the  function  f directly.  That  is,  the  function  f is  to  be  realized 
as  a composition  of  functions  from  the  set  F.  A composition  of  self-dual 
functions,  Ibuki  [20],  is  itself  self-dual.  Thus,  while  the  realization 
of  any  composition  of  functions  from  the  set  F is  an  alternating  circuit. 
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only  alternating  circuits  realizing  self-dual  functions  result  from  the 
compositions.  In  alternating  logic  design,  however,  the  clock  is  available 
and  is  itself  a self-dual  function  representing  the  conventional  o function. 
So,  every  Boolean  function  can  be  represented  in  an  alternating  circuit 
constructed  as  a composition  of  alternating  primitives  f ^ ^ , f ^ \ . . . , f ^ 
if  and  only  if  F'  - { f ^ \ f , . . . , f ^ ,0}  is  a complete  set  of  logical 
primitives  in  conventional  terms.  If  this  is  true,  then  { f f ^ ^ , . . . , f 
will  be  called  a weak  complete  set  of  alternating  logic  primitives.  To 
determine  what  restrictions  are  placed  on  f ^ , f ^ , . . . ,f ^ such  that 
{ f ^,f  . . . ,f  ^\o]  is  a complete  set  of  logic  primitives  in  the 

conventional  sense  requires  some  background  and  development  in  the  theory 
of  complete  sets  of  logic  primitives. 

Definition  7,1:  The  function  set  S generated  by  a function  set  R * 

{ f . , f_ , . . . , f } is  the  set  of  functions  realizable  as  a composition  of 
12  q 

functions  from  the  set  R ar.d  is  denoted  by  [rJ. 

Obviously,  the  set  R is  a complete  set  if  for  every  Boolean 
function  f,fe[R].  Further,  if  K denotes  the  set  of  all  Boolean  functions 
of  N or  fewer  variables  and  [r]  * KN,  then  R is  complete.  This  follows 
from  the  fact  that  if  a function  set  is  complete  for  a certain  value  of  N, 

N > 2,  then  the  function  set  is  complete  for  any  value  of  N,  [20].  A 
minimal  complete  function  set  is  a complete  set  which  fails  to  be  complete 
if  any  one  primitive  is  removed  from  it.  A maximal  incomplete  set  of  logic 
primitives  is  a set  of  logic  functions  which  becomes  complete  if  there  is 


l 

I 

I 


added  to  it  any  other  function  which  is  not  an  element  of  the  set. 
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Five  functional  properties  are  instrumental  in  determining  whether 
. or  not  a set  of  logic  primitives  is  complete.  They  are  the  O-preserving, 

1-preserving,  self-dual,  linear,  and  monotonic  properties  of  the  functions 
in  the  set  R. 

Definition  7.2:  A function  f is  0-preservlng  if  the  value  of  the  function 

is  0 when  every  input  variable  takes  on  a value  of  0. 

£(0,0 0)  - 0 

Let  Mx  designate  the  set  of  all  0-preserving  functions. 

Definition  7.3:  A function  f is  l-preserving  if  the  value  of  the  function 

is  1 when  every  input  variable  takes  on  the  value  1. 

f(l,l,...,l)  - 1 

Let  designate  the  set  of  all  1-preserving  functions. 

■ Definition  7.4:  A function  f is  self-dual  iff  the  function  f and  its  dual 

function  fD  are  identical  or  equivalently, 

f m £ > • • • > • 

Let  designate  the  set  of  all  self-dual  functions. 

» Definition  7.5:  A function  f is  linear  if  it  can  be  written  in  the  form 

f(x1,x2,...,xn)  - 80©  (g1x1©g2x2©  •••©gnxn)- 

r 

* Let  designate  the  set  of  all  linear  functions. 
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Definition  7.6:  A function  f Is  monotonically  increasing  if  for  every 


‘ll’  12 In  - 21'  22 


— i 3 *9 o * * * ' * ^2n 


f(xll'X12 Xln}  ~ ^X21,X22* ’ ' ‘ ,X2n) ' 

Let  designate  the  set  of  all  monotonically  increasing  functions, 


Now,  consider  again  the  set  of  logic  primitives  F1  ■ {f^\f^\..., 
f(p),o]  where  f^  ,f  . . . ,f  ^ are  self-dual  functions.  Completeness  of 

the  set  F'  is  dependent  on  the  properties  of  the  self-dual  functions 
f (l),f (^}, . . . ,f (?).  These  dependencies  are  defined  in  the  following. 


Lemma  7.1:  If  F'^M^,  then  xe[F']  and  1c[f']. 

Proof : If  F'c^Mj,  then  there  exists  a function  feF'  which  is  not  O-preserving. 

So  then,  either  feM^^M^,  or  fcf^fiM^.  But,  if  f is  self-dual  and  not 
O-preserving  then 

f(0,0,...,0)  - 1 

->  f(l,l 1)  - 0, 

and  f is  not  l-preserving.  So,  f^M^OM^.  That  is,  feM^  fi  . But  then 
x 8 [ F ' ] , since  the  function  x can  be  obtained  from  f by  tying  all  inputs  of 
f together.  Thus,  for  0 in,  x^  ■ 0,  Xj  ■ 0, . . . ,xn  ■ 0 and,  since  f is  not 
O-preserving,  a 1 is  produced  as  an  output.  For  1 in,  x^  ■ 1 ,x^  ■ 1 , . . . .x^  ■ 1 
and  a 0 is  produced  as  f is  not  l-preserving.  Now,  since  xe[F']  and  0e[F'], 
le[F'].  Q.E.D. 

Further,  Ibuki  [20]  has  proved  the  following  lemma.  The  proof  appearing 


here  is  a version  of  that  proof. 


Ill 


Lemma  7.2:  If  R<?  and  x,0,le[R]  then  R is  a complete  set  of  primitives, 

where  R is  an  arbitrary  set  of  functions  not  necessarily  self-dual. 

Proof:  If  R<^  M,  then  there  exists  a function  feR  which  is  nonlinear.  That 

4 

is,  if  f is  expanded  in  the  form 

f “ g0®(g1x1@g2x2©  . . . ®gnxn)  ® (g12x1x2®g13x1x3©  . . . ®glnXlxn®g23x2x3®. . . 

® gn-lgnxn-lxn)@  * - ®*12. . .nxlV  * *Xn 

there  exists  at  least  one  term  in  the  expansion  of  order  t where  2 < t < n. 
Let  s be  the  order  of  the  term  of  minimum  order  in  that  range.  Let  y^ 
denote  the  variable  with  the  smallest  subscript  in  the  term,  yg  denote  the 
variable  with  the  next  smallest  subscript,...,  and  yg  denote  the  variable 
with  the  largest  subscript  in  the  term.  Now,  if  y3,y^,...,  and  yg  are 
constrained  to  be  1 and  all  remaining  variables  except  y^  and  y2  are 
constrained  to  be  0,  then  a new  2-variable  function  f results.  Certainly, 


fj«[R]  by  construction. 


£1 


where  a'Q,Q^,®2e(0,l}  • Now,  o^@x2«[r]  for  or^  ■ 0 or  1 since  xef.  Similarly 


a2  ©XjCtR] . 


f2  - “o®V0f2®xl)®V0l®x2)®  (a2®x1)(a1®x2)e[R] 


->  f2  - ao®a1a2®x1x2. 


But  then, 


f3  - °0  ®°1a2  ® f 

■>  f3  ■ XjX2«[r], 
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S imi lar ly , m ^ ^ » ^2 ) » 0^  * ^2  ^ 

■>  “ xix2’5fi*2e[R^ 

•>  f^  ■ x1 0x2  e [r]  . 

But  then,  R must  be  complete  since  {x^x2  ,x^0x2 , 1}  is  a complete  set.  Q.E.D. 

Theorem  7.1:  A set  F = { f ^ ^ , f ^ ^ , . . . , f of  self-dual  functions  is  a 

weak  complete  set  of  alternating  logic  primitives  if  f^  is  not  O-preserving 
for  some  i,  1 < i < p,  and  f^  is  nonlinear  for  some  j,  1 < j < p where 
possibly  i = j . 

Proof:  The  set  F is  a weak  complete  set  of  alternating  logic  primitives  if 

the  set  F1  = (f^\f^^ f^P\o]  is  a complete  set  in  the  conventional 

sense.  And  by  Lemma  7.1  and  Lemma  7.2,  F'  is  complete  if  FWM^  and  F'^M^, 
or  in  other  words  if  f^^  is  not  O-preserving  for  some  i,  1 < i < p and  f^ 
is  nonlinear  for  some  j,  1 < j < p.  Q.E.D. 

Corollary  7.1:  The  set  F * f f ^ , f (2  ) , . . . > f (P)-}  0f  self-dual  functions  is  a 

minimal  weak  complete  set  of  alternating  logic  primitives  if  for  every  proper 
subset  G of  F,  GCM^  or  Gc  . 

Corollary  7.2:  Any  minimal  weak  complete  set  of  alternating  logic  primitives 

contains  at  most  2 self-dual  logic  primitives. 


113 


i 


I 

I 

I 

I 

I 


! 

i 

I 

! 

I 


7.2.  Strong  Complete  Alternating  Primitive  Sets 

In  any  application  of  the  theory  outlined  thus  far  it  is  implicitly 
assumed  that  the  (0,1)  clock,  the  0-function  in  an  alternating  network,  may 
be  used  as  an  input  to  any  variable  line  in  a network  application  of  any 
function  from  the  set  F.  This  means  that  the  (0,1)  clock  may  be  input  on 
2 or  more  variable  lines  in  an  application  of  a given  logic  primitive  in 
the  composition  of  a desired  alternating  network  from  the  set  F of  alternating 
logic  primitives.  This,  however,  may  result  in  an  undesirable  loading  of 
the  clock.  If  application  of  the  clock  is  limited  to  at  most  one  input  line 
of  any  logic  primitive,  a somewhat  different  theory  of  alternating  logic 
primitives  results. 

Once  again  let  F ■ [f ^\f  . . . ,f  where  f^  is  a function 

of  kj  variables,  1 < j < p,  be  a set  of  self-dual  functions.  The  set  F is 
a strong  complete  set  of  alternating  logic  primitives  if  an  alternating 
network  representing  any  Boolean  function  can  be  constructed  by  composing 
elements  of  F with  the  provision  that  the  (0,1)  clock  is  used  as  an  input 
to  at  most  one  variable  of  any  given  alternating  logic  primitive.  Before 
the  problem  can  be  restated  in  terms  pertinent  to  conventional  theory  of 
complete  sets,  the  concept  of  a 0-sub function  must  be  defined. 


I 

1 

I 

I 

I 


Definition  7.7:  The  i-th  0-sub function  f^  ^ of  a function  f (x^ ,x2 , . . . ,xr) 

of  n variables  is  the  function  obtained  by  constraining  the  i-th  variable 
in  f(x^»x2 xR)  to  a 0.  That  is, 


f0,i(xl,x2’ 


»xi-l,xi+r 


«xn> 


f(x1.x2, 


,xi-i,o ,xf+l * * * " ’ xn^ ’ 
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For  a function  f^\  1 < J < p,  from  the  set  F the  i-th  O-subfunction  will 
be  denoted  f^^.  Now,  the  set  F ■ { f ^ \ f ^ \ . . . , f will  be  a strong 
complete  set  of  alternating  logic  primitives  if 


T * U(1)  f(2)  f(p)  U u”  f(m>} 

1 U ,t  ,mu1  iml  £0jli 


is  a set  of  complete  logic  primitives  in  the  conventional  sense.  Further, 
the  completeness  of  T can  be  determined  using  the  following  theorem. 


Ibuki  [20] . 


Theorem  7.2:  A function  set  R is  a complete  set  of  functions  if  for 

1 < i < 5. 

The  proof  of  the  theorem  is  presented  in  [20]  and  is  not  repeated  here.  Now, 

P 

the  number  of  functions  in  T is  at  most  p + L,k  as  some  of  the  0-sub functions 

m«l  m 

may  be  identical.  At  any  rate  it  appears  that  each  function  in  T must  be 
classified  according  to  the  five  properties,  0-preserving,  1-preserving, 
self-dual,  linear,  and  monotonic  so  as  to  determine  if  T is  a complete  set. 
Fortunately,  this  is  not  the  case  as  will  be  shown. 

Lemma  7.3:  No  O-subfunction  f^  ^ of  a self-dual  function  f (x^ ,x^ , . . . ,xn) 

is  self-dual,  1 < i < n. 

Proof ; By  hypothesis  f is  a self-dual  function  of  n variables.  By  way  of 

contradiction  assume  that  f is  self-dual.  Then, 

U,  1 

f 1*2 9 * * * ,xi-l ,xi+l 9 * * * »xn)  m »X2 * • • • *xi»i * " * * »xn) * 


But,  since  f is  self-dual 
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f (x^ , X£  > * • • *x^_ 1 9 ^i+1  * ' * 1 m ^ ^1 * x2  * * * * >X1."1*^ 9 xi+l ***** ) 

m^>  f » J<2 » • • ■ * Xi+1  * * * * *xn ^ m ^xl*x2*  * * * *xl-l*  ^ *xi+l * * * * »xn) 

for  every  x^.x^.-.-.x^  i*xi+i* * • * *xn  and  ic  therefore  follows  that  f is  a 
function  of  n-1  variables,  a contradiction.  Q.E.D. 


Lemma  7.4:  If  f (x^ ,x2 , . . . ,xR)  is  a linear  function  of  n variables,  then 

every  O-subfunction  f^  1 < i < n,  is  linear. 

Proof : By  hypothesis  f is  a linear  function  and  can  therefore  be  written  in 

the  form 

f - gQ©(g1x1®g2x2®...®gnxn) 
where  g .gj, . . . ,g  «{0,l} . But  then. 


f0,i(xl’V***»X 


i-l,xi+l,,,,,xn)  “ 8o®  (glxl®  * ‘ ’ ®gi-lxi-l@8i+lxi+l®  " ‘ 

®gnXn>- 


The  function  f . is  therefore  a linear  function  also. 
U , 1 


Q.E.D. 


Lemma  7.5:  If  f (x^ ,x2 xr)  is  a monotonically  increasing  function  of  n 

variables,  then  every  O-subfunction,  f^  1 < i < n,  is  monotonically 
increasing. 

Proof ; By  way  of  contradiction  assume  that  f (x^,x2 , . . . ,xr)  is  monotonically 

increasing  but  that  fn  . for  some  i,  1 < i < n,  is  not.  Then,  there  exists 

U f 1 

a pair  of  (n-l)-tuples 


X1,1X2,1* 


*Xi-l,l  Xi+1 , l ‘ 


•xn,l-xl,2x2,2' 


xi-l,2  xi+l,2",xn,2 


for  which 
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f0,i(xl,l,x2,l xi-l,l,Xi+l,l,‘",Xn,l)<  f0,i(xl,2,x2,2 xi-l,2‘ 


xl+l,2’*",xn,2)* 


But,  since 


and 


f0,i(xl,l*x2,l"*"xi-l,l’xi+l,l”-*,xn,l)  “ f(xl,l,x2,l,"',Xi-l,r0’ 

xi+l,l xn,l^ 

f0,i(xl,2,x2,2 xi-l,2,xi+l,2,,”,xn,2)  “ f(xl,2,x2,2’  * * * ,xi-l,2’0. 


xi+l,2,-",Xn,2) 


for 


xl,lx2,l*"xi-l,l  xi+l,l"'xn,l-xl,2x2,2***xi-l,2  xi+l ,2 " ,xn,2 * 

f <X1, 1*X2,1*  * ‘ * *X1-1, l,0,Xi+l,l xn, 1^ < f (X1,2,X2,2 Xi-1,2’0, 

xi+l,2 Xn,2^  * 


The  function  f is  therefore  not  monotonically  increasing,  a contradiction. 

Q.E.D. 


The  above  lemmas  have  thus  shown  that  the  set 

£<P>.S,  /,£<■>) 

m-1  i*l 

always  contains  a unction  which  is  not  self-dual.  Specifically  every  sub- 
function f_  is  not  self-dual.  Further,  the  lemmas  show  that  to  determine 
U,  1 

if  T is  a subset  of  the  set  of  linear  functions,  TC  M^,  or  if  T is  a subset 
of  the  set  of  monotonically  increasing  functions,  TC  , only  the  functions 
f <l),f ^2>, . . . ,f (p)  need  be  examined  with  respect  to  these  properties. 


J 
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Theorem  7.3:  A set  of  self-dual  functions  F * {f  ^,f  . . . ,f  is  a 

strong  complete  set  of  alternating  logic  primitives  if  f^  is  not 

O-preserving  for  some  i,  1 < i < p,  f^^  is  not  linear  for  some  j, 

(k) 

1 < j < p,  and  fv  ' is  not  monotonical ly  increasing  for  some  k,  1 < k < p. 
Proof : The  set  F ■ {f^\f^ f^}  is  a strong  complete  set  of 


alternating  logic  primitives  if 


p ^m 


T - ff(1)  f(2)  f(p),  U U f<r}) 

T [ 1 ,£  » ' ' ’ ,£  m-1  i“l  0,1 


is  complete  in  the  conventional  sense.  And,  by  Theorem  7.2,  T is  complete 
if  T ^ for  1 < i < 5.  Now,  F contains  a function  f^\  1 < i < p,  which 
is  not  O-preserving  by  hypothesis.  So,  T <7  M^.  But  if  a self-dual  function 
is  not  O-preserving  it  is  not  1-preserving.  So,  T By  Lemma  7.3, 

T 3 ttj  as  every  subfunction  f^  ^ is  not  self-dual.  Finally,  by  Lemma  7.4 
and  Lemma  7.5  T and  T £ if  F # and  F # . So,  T is  complete 


if  F7  m1,m4,m5< 


Q.E.D. 


Corollary  7.3:  A proper  set  of  seif-dual  functions  F ■ lf^, . . . ,f  ^3  is  a 

minimal  strong  complete  set  of  alternating  logic  primitives  if  for  every 
proper  subset  G of  F,  Gc  F,  then  Gc  for  some  i,  i*  1,4,5. 

Theorem  7.4:  Any  weak  complete  set  of  alternating  logic  primitives  is  also 

a strong  complete  set  of  alternating  logic  primitives. 

Proof : Assume  a set  F * {f^\f  . . . ,f  is  a weak  complete  set  of 

alternating  logic  primitives.  Then  F M^M^.  But,  if  F^  M^,  then  there  is 
a function  f^,  1 < i < p,  f^eF,  having  the  property  that  f^  is  not 
O-preserving.  So, 
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f(0,0 0)  - 1 

and  by  self-duality 

f (1 , 1 1)  - 0. 


But  then  there  is  a pair  of  n-tuples  namely  000... 0 and  111...1  with  the 
following  relationship 

111 ...  1 > 000. ..0 

f(l,l 1)  - 0 < 1 - f(0,...,0). 


So,  f is  not  monotonically  increasing,  and  F <7  . So,  if  chen 

F^MlfM4,M5.  Q.E.D. 


7.3.  Alternating  Design  with  the  Majority  Module 

Necessary  conditions  that  a set  of  p alternating  logic  primitives 

F * { f ^,f  . . . ,f  be  a complete  set  of  alternating  logic  primitives 

have  been  derived.  Application  of  these  conditions  to  minimal  complete 

sets  resulted  in  a bound  on  p,  p < 2.  So,  consider  the  set  F ■ (f^,f  (2)} 

in  this  regard  where  f^  and  f^  are  functions  specified  in  Figure  7.1. 

Both  f(I)  and  f(2)  are  self-dual,  and  f(1)  M^,  f(2)  ^ Mj  so  F ■ 

F - {f<l\f<2>}  * The  set  F is  therefore  a complete  set  of  alternating 

logic  primitives.  Further,  since  f^  c and  f^2^  c the  set  F is  a 

minimal  complete  set  of  alternating  logic  primitives, 

(2) 

Obviously,  the  module  f is  the  standard  NOT  gate  or  module. 

The  module  f^,  however,  is  not  a standard  gate  or  module.  The  module 
f^  is  a majority  gate,  namely  a 3-input  majority  gate.  Since  F is 
complete,  with  a basic  module  realizing  f^  and  a basic  module  realizing 
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(2) 

f , alternating  circuits  representing  any  Boolean  function  can  be 
constructed.  But  what  design  procedures  define  the  required  construction? 
Some  insight  into  such  a design  procedure  might  be  gained  by  examining  the 
functions  represented  by  f^^  when  the  (0,1)  clock  is  applied  as  input 
first  on  x^,  then  on  , and  finally  on  x^.  These  functions  are  f^^, 
f^1^*  and  respectively. 

f^  - xix3 +xix2 +X2X3 

fd)  „ x x f(D  . x x f(D  . x x 

0,1  23  r0,2  13  r0,3  *12 


Thus,  with  the  (0,1)  clock  on  any  input  to  the  M module,  the  M module 

represents  the  AND  of  the  other  inputs.  The  M module  configured  in  this 

manner  will  be  called  the  "alternating  AND." 

(2) 

Now,  since  the  NOT  gate,  fv  ' , is  in  the  set  F,  the  (0,1)  clock 
can  be  applied  as  input  to  that  gate  so  as  to  produce  a complemented  clock, 
the  (1,0)  clock.  When  this  clock  is  applied  to  the  M module  as  input, 
first  on  Xj,  then  on  x2»  and  finally  on  x3>  an  alternating  circuit  repre- 
senting f^j»  f^*  and  respectively,  results. 


f^  ■ xjX3  +XjX2  +x2x3 


f(1)  - X +x 

1,1  x2  x3 


fd) m x +x 
1,2  1 X3 


Thus,  with  the  (1,0)  clock  on  any  input  to  the  M module,  the  M module 
represents  the  OR  of  the  other  Inputs.  The  M module  configured  in  this 
manner  will  be  called  the  "alternating  OR." 

i 

I 

I 


A design  proceudre  therefore  presents  Itself.  Assume  a Boolean 
function  f is  to  be  represented  in  an  alternating  system.  A conventional 
AND-OR-NOT  realization  of  f is  first  found  utilizing  standard  design 
techniques.  Then,  every  AND  gate  is  replaced  by  an  alternating  AND. 
Similarly,  every  OR  gate  is  replaced  by  an  alternating  OR.  Every  NOT  gate 
remains  intact.  The  additional  (1,0)  clock  is  obtained  from  the  (0,1)  clock 
using  an  additional  NOT  gate.  The  resulting  network  is  certainly  an 
alternating  network  since  it  constitutes  a composition  of  alternating 
logic  primitives,  namely  f^  and  Primary  inputs  to  the  conventional 

AND-OR-NOT  realization  become  primary  inputs  to  the  alternating  circuit  and 
in  the  case  of  the  alternating  system  are  assumed  to  alternate  in  synchronism 
with  the  (0,1)  clock.  Further,  the  resulting  alternating  network  must 
represent  £ as  each  conventional  gate  is  replaced  with  an  equivalent 
alternating  gate. 

Example  7.1:  Assume  that  a function  f is  to  be  realized  in  an  alternating 

logic  design  where 

f - (*2x3  +Xlx4)x5. 

To  generate  the  desired  alternating  network  a conventional  AND/OR/NOT  design 
is  first  generated  directly  from  the  functional  description  for  f.  This 
network  is  shown  in  Figure  7.2  a).  Then  each  AND  gate  is  replaced  by  an 
alternating  AND  and  each  OR  by  an  alternating  OR.  The  (0,1)  clock  required 
by  the  alternating  AND's  is  assumed  to  be  available.  The  (1,0)  clock 
required  by  the  alternating  OR's  is  obtained  from  the  (0,1)  clock  using  an 
additional  NOT  gate.  The  alternating  network  is  shown  in  Figure  7.2  b). 


Figure  7. 
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7.4.  Alternating  Design  with  the  Minority  Module 
Consider  the  set  F ■ {f  d)3 

, where  is  specified  as  in 

Figure  7.3.  Now,  't  M^,  f^  ? so  F is  a complete  set  of  alternating 

logic  primitives.  That  is,  the  function  f^  is  complete  in  itself  being 
self-dual,  but  neither  O-preserving  nor  linear.  If  the  (0,1)  clock  is 
applied  on  any  input  of  the  M module  realizing  f^\  then  in  an  alternating 
network,  the  NAND  of  the  other  two  inputs  is  realized. 

f^  * (x1+x2)(x1+x3)(x2+x3) 

fd)  m x X f^  •»  x X fd)  - x X 

0,1  23  0,2  13  r0,3  X1  2 

The  M module  configured  with  the  (0,1)  clock  as  one  input  will  be  referred 
to  as  the  "alternating  NAND."  Similarly,  if  the  (1,0)  clock  is  applied  on 
any  input  of  the  M module,  then  in  an  alternating  network  the  NOR  of  the 
other  two  inputs  is  realized. 


:(1) 


f ^ ^ ts  x -tx 

1,1  2W3 


(Xl+X2.)  ^xi+x3^x2+x3^ 


fd) 

1,2 


xl'bc3 


f(D  . 

rl  ,3  xl~2 


The  M module  configured  with  the  (1,0)  clock  as  one  input  will  be  referred 
to  as  the  "alternating  NOR." 

One  design  procedure  for  obtaining  alternating  networks  composed 
of  minority  gates  thus  proceeds  as  follows.  The  Boolean  function  to  be 
realized  in  an  alternating  network  is  first  realized  as  a conventional  NAND 
network.  Then,  each  NAND  gate  in  this  network  is  replaced  by  an  alternating 
NAND  to  form  an  alternating  network.  Primary  network  Inputs  in  the 
conventional  design  become  alternating  primary  inputs  in  the  alternating 
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design,  alternating  in  synchronism  with  the  (0,1)  clock,  which  is  used  as 
input  to  each  alternating  NAND.  The  result  is  an  alternating  circuit 
realizing  f. 

Example  7.2:  Assume  that  a function  f is  to  be  realized  in  an  alternating 
logic  design  using  minority  gates  where  f is  given  as 

f = <x2  x??)(xl  xpTp. 

Since  f is  already  specified  as  a NAND  decomposition,  a conventional  NAND 
network  realizing  f can  be  obtained  from  the  functional  specification 
directly.  This  network  is  shown  in  Figure  7.4  a).  To  obtain  an  alternating 
network  f each  NAND  in  the  conventional  network  is  first  replaced  with  an 
M module  having  one  input  tied  to  the  (0,1)  clock  which  is  assumed  to  be 
available.  Primary  inputs  to  the  conventional  network  become  synchronized 
alternating  primary  inputs  to  the  alternating  network.  The  resulting 


! 

! 

I 

I 

I 

I 


network  is  an  alternating  network  realizing  the  function  f and  is  shown  in 
Figure  7.4  b). 

The  minority  logic  alternating  network  of  least  cost  is  not 
necessarily  obtained  by  the  above  procedure  even  if  the  conventional  design 
from  which  the  alternating  design  is  constructed  is  optimal.  The  reason 
for  this  is  that  no  attempt  is  made  to  use  the  f^  module,  independent  of 
the  (0,1)  clock  as  a basic  gate.  The  following  example  illustrates  the 


problem. 
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Example  7.3:  Consider  the  function  f given  as 

f - (x4  (xLx2  ) (x1x3  ) (x2x3  ) ) xpcj  . 

A conventional  NOR  network  realizing  f would  utilize  8 NOR  gates.  The 
alternating  network  obtained  from  this  realization  by  the  minority  logic 
alternating  design  procedure  would  therefore  utilize  8 M-modules.  However, 
a realization  using  only  4 M-modules  exists.  This  realization  is  obtained 
as  follows.  Rewrite  f^  in  its  dual  form, 

f ^ ■ (x1-hc2)(x24x3)(x1+x3) 

■*>  f^  * XjX2  +x2x3  +x3x3, 
and  then  formulate  it  as  a NAND  decomposition, 


:CD 


(XjXjXx^)  (XjX^, 


Utilize  the  f^^  function  where  possible  as  a subfunction  in  f. 


f - x4f ^ (x1,x2,x3)  x1x3 

The  resulting  minority  logic  alternating  network  is  shown  in  Figure  7.5. 

A similar  problem  exists  for  the  majority  logic  alternating  design 
procedure  discussed  in  the  previous  section.  No  effort  is  made  to  utilize 
the  M-module  as  a basic  gate  and  minimality  of  the  alternating  design  obtained 
can  therefore  not  be  guaranteed  even  if  the  conventional  AND/OR/NOT  design  is 
optimal . 

A minority  logic  alternating  design  procedure  can  also  be  defined 
utilizing  alternating  NOR's.  This  procedure  is  the  dual  of  the  design 


fcv-*'rv'  rV*'1' 
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procedure  defined  for  minority  logic  alternating  design  using  alternating 
NAND.  As  such  it  begins  with  a conventional  NOR  decomposition  of  the  function 
to  be  realized.  Each  NOR  is  then  replaced  by  an  alternating  NOR,  so  the  (1,0) 
clock  is  required  and  primary  network  inputs  become  primary  alternating 
inputs  synchronized  with  this  clock.  Comments  on  optimality  apply  here  as 
in  the  case  of  the  alternating  NAND  design  discussed  earlier. 


7.5.  Self-Checking  Characteristics  of  Compositions  of  Alternating  Logic 
Primitives 

The  methods  which  have  been  described  yield  alternating  circuits 

composed  of  alternating  logic  primitives  representing  any  arbitrary  Boolean 

function.  These  circuits,  however,  may  not  be  self -checking.  Consider  an 

arbitrary  alternating  network  N constructed  as  a composition  of  alternating 

logic  primitives  with  n Inputs  (x^ ,x^) , (x^,^ )»•••» (*n»xn)  and  m outputs 

(f  i )»  (f~ » fo  )*•••»  (f  )•  During  fault-free  operation  inputs  alternate 
11  L L.  m tn 

and,  as  a result,  the  output  of  any  logic  primitive  having  only  primary 
network  inputs  as  inputs  must  alternate.  But  then,  the  output  of  any  logic 
primitive  having  as  inputs,  primary  network  inputs  or  outputs  from  primitives 
having  as  input  only  primary  network  Inputs,  must  alternate.  Continuing, 
the  output  of  every  alternating  logic  primitive  in  a composition  of 
alternating  logic  primitives  must  alternate  if  alternating  inputs  are 
applied.  Faults,  however,  may  occur  in  the  network.  Such  faults  are 
assumed  to  occur  as  stuck-at  faults  on  input  and  output  linea  of  alternating 
logic  primitives.  More  formally,  the  fault  set  3 is  assumed  to  be  the  set  of 
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all  single  stuck-at-0  and  stuck-at-l  faults  on  any  alternating  logic 
primitive  input  or  output  line.  Assuming  that  a fault  from  the  set  3 is 
present  in  the  network  N,  the  network  is  self-checking  for  that  fault  if  no 
erroneous  alternating  output  appears  on  f^ , 1 < i < m,  unaccompanied  by  a 
nonalternating  output  on  some  f j , 1 < j < m,  i^J. 

Theorem  7.5:  Any  network  N consisting  of  a composition  of  alternating 

logic  primitives  is  self -checking  for  all  single  stuck-at-0  and  stuck-at-l 
faults  on  any  alternating  logic  primitive  input  or  output  line. 

Proof : Assume  a single  fault  f^  is  present  on  an  arbitrary  logic  primitive 

input  or  output  line,  a.  Since  the  network  N is  a composition  of  alter- 
nating logic  primitives,  in  fault-free  operation  either  (d,d)  or  (d,d)  is 
applied  on  a.  If  (d,d)  is  applied  then  the  fault  is  sensitized  only  during 
the  application  of  X ■ XjX^ . . .xn  to  N.  So,  on  any  output  f^,  1 < i < m, 
either  (f^.f^)  is  produced  if  X also  sensitizes  a path  from  a to  output  f^, 
or  (fj^.fj),  normal  output,  is  produced  if  X does  not  sensitize  a path 
from  a to  the  output  f^.  If  (d,d)  is  applied  then  the  fault  is  sensitized 
only  during  the  application  of  X ■ x^x^.-.x^  to  N.  As  a result,  on  any 
output  f^,  1 < i < m only  or  *8  produced.  In  no  case  can 

an  erroneous  alternating  output  be  produced  and  N is  therefore  self- 
checking for  all  single  faults  from  the  fault  set  3.  Q.E.D. 

The  significance  of  Theorem  7.5  lies  in  its  generality. 

According  to  the  theorem  any  alternating  network  resulting  from  the  minority 
and  majority  logic  alternating  design  procedures  must  be  self-checking,  as 
the  procedures  yield  alternating  networks  which  are  structured  as 
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compositions  of  alternating  logic  primitives.  In  fact,  these  networks  are 
self-checking  irregardless  of  the  network  structure  utilized  in  the 
conventional  designs  which  Initiate  the  design  procedures.  In  Example  7.2 
the  conventional  NAND  network  contained  reconvergent  fanout  with  unequal 
inversion  parity  on  output  paths  originating  on  the  fanout  point.  And, 
while  the  alternating  network  resulting  from  the  application  of  the  design 
procedure  retains  the  same  structure.  Theorem  7.5  says  that  it  must  be 
self-checking  for  all  single  faults. 


I 
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8.  CONCLUSION 


8.1.  Summary 

The  application  of  alternating  logic  in  the  design  of  combina- 
tional and  sequential  circuits  with  the  capability  to  detect  all  single 
stuck-at  faults  on  all  network  lines  without  passing  erroneous  data  to  the 
user  has  been  studied.  The  fault  detecting  capability  was  obtained  by 
utilizing  a redundancy  in  time  instead  of  the  conventional  space  redundancy 
and  is  based  on  the  successive  execution  of  a required  function  and  its 
dual.  In  combinational  networks  the  method  involves  the  utilization  of  a 
self-dual  function  to  represent  the  required  function  and  the  realization 
of  the  self-dual  function  in  a network  with  structural  properties  which  are 
sufficient  to  guarantee  the  detection  of  all  single  faults.  The  Internal 
fanout-free  network,  the  essentially  inverter-free  AND/OR/NOT  network,  and 
the  inverter-free  network  were  defined  and  shown  to  be  network  structures 
having  these  properties.  Further,  necessary  and  sufficient  conditions  that 
any  general  alternating  combinational  structure  be  self -checking  were  derived. 
That  a network  satisfies  these  conditions  was  shown  to  be  readily  checked 
utilizing  computer  simulation.  Multi-output  combinational  structures  were 
also  discussed  and  an  important  multi-output  network,  the  full  adder,  was 
studied  in  detail.  With  respect  to  this  network,  the  advantages  of  sharing 
logic  in  multi-output  alternating  networks  were  Illustrated. 

A particular  class  of  combinational  alternating  networks, 
namely  NAND/NOR  alternating  networks  were  examined  in  more  detail.  An 
algebra  for  manipulating  the  functional  description  for  the  alternating 
NAND/NOR  network  for  the  purpose  of  obtaining  a more  economical  realization 
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was  developed.  The  algebra  consisted  of  a set  of  transformations,  which 
when  applied  to  a functional  description  of  a self-checking  alternating 
NAND/NOR  network,  could  only  result  in  an  alternate,  but  hopefully  more 
economical,  functional  description  while  retaining  the  self-checking  struc- 
tural properties.  The  method  was  applied  to  the  full-adder,  beginning  with 
its  standard  NAND  two-level  functional  description  and  generating  its 
optimal  NAND  multilevel  realization. 

The  cost  of  implementing  the  dualized  function  as  a self-checking 
alternating  network  as  compared  with  the  cost  of  implementing  the  original 
function  in  a conventional  design  was  also  studied.  The  study  was 
restricted  to  NOR  networks  and  the  cost  of  dualizing  all  three-variable 
functions  was  studied.  Only  NOR  networks  and  three-variable  functions  were 
considered  because  of  availability  of  data.  The  results  showed  that  on 
the  average  a cost  increase  of  85%  resulted.  This,  however,  did  not  include 
the  cost  of  a checker  for  monitoring  output  lines. 

The  application  of  alternating  logic  design  to  synchronous 
sequential  machines  was  also  studied,  and  a method  for  realizing  any 
synchronous  sequential  machine  with  feedback  and  output  circuitry  designed 
using  combinational  alternating  logic  techniques  was  presented.  The 
resulting  realization  was  shown  to  be  capable  of  detecting  all  single 
faults  in  the  feedback  and  output  combinational  circuitry  and  all  single 
input  and  output  faults  associated  with  the  memory  elements.  While  the 
method  did  not  place  any  restraints  on  the  state  assignment  of  the  secondary 
variable,  the  number  of  memory  elements  required  was  doubled.  However,  the 
extra  set  of  memory  elements  added  also  served  as  the  memory  elements 
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required  by  the  alternating  checker  and  therefore  reduced  cost  increase 
there. 

Since  some  means  must  be  provided  to  monitor  network  output  lines 
(in  the  case  of  synchronous  machines,  network  output  lines  and  feedback 
lines)  so  as  to  provide  an  indication  of  the  occurrence  of  nonalternating 
outputs  on  these  lines,  a network  performing  this  task,  the  alternating 
checker,  was  defined.  One  such  checker,  utilized  a memory  element  for  each 
monitored  line  and  performed  the  self-checking  function  in  the  general 
case  while  being  self-checking  itself.  A second  checker  utilized  only 
exclusive-OR  gates  in  its  construction  and  performed  the  self-checking 
function  on  networks  possessing  the  property  that  nonalternating  outputs 
occur  on  only  a single  line  at  a time.  This  checker  was  also  shown  to  be 
self-checking. 

An  alternate  approach  to  designing  self-checking  alternating 
networks  was  also  studied.  Instead  of  utilizing  conventional  logic 
primitives  (AND/OR/NOT,  NAND,  NOR,  etc.),  self-dual  logic  primitives  were 
considered  since  composing  these  primitives  to  form  a network  naturally 
yields  an  alternating  network.  Conditions  that  a set  of  these  primitives 
be  complete,  that  is,  that  all  Boolean  functions  be  represented  as  a 
composition  of  these  primitives,  were  defined.  Further,  it  was  shown  that 
any  network,  regardless  of  its  structure,  is  self-checking  for  all  single 
stuck-at  faults  on  alternating  primitive  input  and  output  lines.  The 
alternating  primitive  set,  {m,NOt} , where  M is  a three-input  majority 

a 

gate,  was  studied  in  detail  as  it  allowed  any  conventional  AND/OR/NOT 
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network  design  to  be  converted  Into  a self-checking  network  of  M gates  and 
NOT  gates  with  particular  ease. 

With  respect  to  the  area  of  applicability  of  alternating  logic, 

8 ome  remarks  should  be  made.  First,  since  alternating  systems  utilize  a 
redundancy  in  time  In  order  to  achieve  fault  detection  capabilities,  an 
alternating  system  approach  to  fault  detection  probably  should  not  be 
used  where  time  is  a constraining  factor.  However,  In  clocked  systems  where 
logic  speed  is  more  than  double  the  speed  required  by  the  application, 
alternating  logic  design  can  be  an  effective  technique  for  producing 
combinational  and  sequential  circuits  which  are  self-checking  for  all  single 
faults.  Utilization  of  redundancy  in  time,  however,  also  leads  to  an 
advantage  in  that  dynamic  checking  of  circuit  operation  is  achieved  without 
an  increase  in  the  number  of  input  and  output  lines  associated  with  the 
network  itself.  Thus,  in  MSI  and  LSI  applications  where  pin  count  is  a 
major  factor,  an  alternating  logic  design  could  be  a feasible  approach  in 
achieving  a measure  of  fault  detecting  capability. 


8.2.  Suggestions  for  Further  Research 

The  capability  of  alternating  systems  to  detect  all  single  faults 
of  the  stuck-at  type  while  not  passing  erroneous  data  to  the  user  has  been 
studied.  Specific  alternating  systems,  however,  may  have  some  multiple 
fault  detection  capabilities.  These  multiple  fault  detection  capabilities, 
if  any,  need  to  be  researched  and  defined. 
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In  order  to  gain  a measure  of  multiple  fault  detection  capability. 
It  may  however  be  necessary  to  utilize  a more  complex  coding  scheme  than 
the  basic  alternating  scheme  studied  here.  The  systems  studied  here  In 
essence  employ  a two-rail  encoding  in  time  rather  than  in  space  and  hence 
are  referred  to  as  alternating  systems.  The  encoding  used,  however,  may  be 
generalized  to  more  complex  time  encodings.  One  result  of  this  could  be  a 
reduction  In  the  ratio  of  the  number  of  check  bits  to  information  bits,  which 
for  alternating  systems  is  l/l . Such  a reduction  would,  of  course,  alleviate 
at  least  to  some  extent  some  of  the  speed  restrictions  that  limited  the 
applicability  of  alternating  systems.  A second  result  could  be  the  multiple 
fault  detection  capability  mentioned  earlier.  Timing  considerations  could, 
however,  be  prohibitive. 

The  application  of  alternating  logic  to  synchronous  sequential 
machines  has  been  studied.  It  may  also  be  possible  to  apply  alternating 
logic  to  some  forms  of  asynchronous  machines,  particularly  those  machines 
which  employ  a "handshaking"  scheme.  Research  in  this  area  might  also 
prove  fruitful. 
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